-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


                                                         JPCERT-WR-2017-4501
                                                                   JPCERT/CC
                                                                  2017-11-22

            <<< JPCERT/CC WEEKLY REPORT 2017-11-22 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B11/12($BF|(B)$B!A(B11/18($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![J#?t$N(B Microsoft $B@=IJ$K@H<e@-(B
$B!Z(B2$B![J#?t$N(B Adobe $B@=IJ$K@H<e@-(B
$B!Z(B3$B![(BMozilla Firefox $B$KJ#?t$N@H<e@-(B
$B!Z(B4$B![(BOracle Tuxedo $B$KJ#?t$N@H<e@-(B
$B!Z(B5$B![(BCisco Voice Operating System $B$K%"%/%;%98"8BITHw$N@H<e@-(B
$B!Z(B6$B![(BWindows 8 $B$*$h$S$=$l0J9_$N%P!<%8%g%s$K$*$$$F(B ASLR $B$,E,@Z$K9T$o$l$J$$LdBj(B
$B!Z(B7$B![(BWordPress $BMQ%W%i%0%$%s(B TablePress $B$K(B XML $B30It<BBN;2>H(B (XXE) $B=hM}$N@H<e@-(B
$B!Z(B8$B![(BCS-Cart$BF|K\8lHG$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
$B!Z(B9$B![(BPacketbeat $B$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
$B!Z(B10$B![%m%\%C%H2HEE(B COCOROBO $B$K%;%C%7%g%s4IM}ITHw$N@H<e@-(B
$B!Z:#=5$N$R$H$/$A%a%b![7P:Q;:6H>J$H(B IPA $B$,!V%5%$%P!<%;%-%e%j%F%#7P1D%,%$%I%i%$%s(B Ver2.0$B!W$r8x3+(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/2017/wr174501.html
        https://www.jpcert.or.jp/wr/2017/wr174501.xml
============================================================================


$B!Z(B1$B![J#?t$N(B Microsoft $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Microsoft Releases November 2017 Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/11/14/Microsoft-Releases-November-2017-Security-Updates

      CERT/CC Vulnerability Note VU#421280
      Microsoft Office Equation Editor stack buffer overflow
      https://www.kb.cert.org/vuls/id/421280

    $B35MW(B
      $BJ#?t$N(B Microsoft $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T(B
      $B$,G$0U$N%3!<%I$r<B9T$9$k$J$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O<!$N$H$*$j$G$9!#(B

      - Internet Explorer
      - Microsoft Edge
      - Microsoft Windows
      - Microsoft Office and Microsoft Office Services $B$*$h$S(B Web Apps
      - ASP.NET Core and .NET Core
      - Chakra Core

      $B$3$NLdBj$O!"(BMicrosoft Update $BEy$rMQ$$$F!"99?7%W%m%0%i%`$rE,MQ$9$k$3$H(B
      $B$G2r7h$7$^$9!#>\:Y$O!"(BMicrosoft $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B%^%$%/%m%=%U%H3t<02q<R(B
      2017 $BG/(B 11 $B7n$N%;%-%e%j%F%#99?7%W%m%0%i%`(B
      https://portal.msrc.microsoft.com/ja-jp/security-guidance/releasenotedetail/bae9d0d8-e497-e711-80e5-000d3a32fc99

      $B%^%$%/%m%=%U%H3t<02q<R(B
      CVE-2017-11882 | Microsoft Office $B$N%a%b%jGKB;$N@H<e@-(B
      https://portal.msrc.microsoft.com/ja-JP/security-guidance/advisory/CVE-2017-11882

      Japan Vulnerability Notes JVNVU#90967793
      Microsoft Office $B?t<0%(%G%#%?$K%9%?%C%/%Y!<%9$N%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      https://jvn.jp/vu/JVNVU90967793/

      JPCERT/CC Alert 2017-11-15
      2017$BG/(B 11$B7n%^%$%/%m%=%U%H%;%-%e%j%F%#99?7%W%m%0%i%`$K4X$9$kCm0U4-5/(B
      https://www.jpcert.or.jp/at/2017/at170044.html

$B!Z(B2$B![J#?t$N(B Adobe $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Adobe Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/11/14/Adobe-Releases-Security-Updates

    $B35MW(B
      $BJ#?t$N(B Adobe $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,!"(B
      $BG$0U$N%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9$k$J(B
      $B$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Adobe Flash Player $B%G%9%/%H%C%W%i%s%?%$%`(B 27.0.0.183 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG!"(BLinux $BHG(B)
      - Photoshop CC 2017 18.1.1 (2017.1.1) $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Connect 9.6.2 $B$*$h$S$=$l0JA0(B
      - Adobe Acrobat DC (Continuous Track) 2017.012.20098 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat Reader DC (Continuous Track) 2017.012.20098 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat 2017 2017.011.30066 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat Reader 2017 2017.011.30066 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat DC (Classic Track) 2015.006.30355 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat Reader DC (Classic Track) 2015.006.30355 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Acrobat XI 11.0.22 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Reader XI 11.0.22 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe DNG Converter 9.12.1 $B$*$h$S$=$l0JA0(B (Windows $BHG(B)
      - Adobe InDesign 12.1.0 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG(B)
      - Adobe Digital Editions 4.5.6 $B$*$h$S$=$l0JA0(B (Windows $BHG!"(BMacintosh $BHG!"(BiOS $BHG!"(BAndroid $BHG(B)
      - Adobe Shockwave Player 12.2.9.199 $B$*$h$S$=$l0JA0(B (Windows $BHG(B)
      - Adobe Experience Manager 6.3
      - Adobe Experience Manager 6.2
      - Adobe Experience Manager 6.1
      - Adobe Experience Manager 6.0

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Adobe $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BAdobe $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Adobe
      Flash Player $BMQ$N%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-33
      https://helpx.adobe.com/jp/security/products/flash-player/apsb17-33.html

      Adobe
      Adobe Photoshop CC $B$K4X$9$k%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B| APSB17-34
      https://helpx.adobe.com/jp/security/products/photoshop/apsb17-34.html

      Adobe
      Adobe Connect $BMQ$N%;%-%e%j%F%#%"%C%W%G!<%H(B | APSB17-35
      https://helpx.adobe.com/jp/security/products/connect/apsb17-35.html

      Adobe
      Adobe Acrobat $B$*$h$S(B Reader $B$K4X$9$k%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-36
      https://helpx.adobe.com/jp/security/products/acrobat/apsb17-36.html

      Adobe
      Adobe DNG Converter $B$K4X$9$k%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B| APSB17-37
      https://helpx.adobe.com/jp/security/products/dng-converter/apsb17-37.html

      Adobe
      InDesign $B$rBP>]$H$7$?%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-38
      https://helpx.adobe.com/jp/security/products/indesign/apsb17-38.html

      Adobe
      Adobe Digital Editions $B$K4X$9$k%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-39
      https://helpx.adobe.com/jp/security/products/Digital-Editions/apsb17-39.html

      Adobe
      Shockwave Player $BMQ$N%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-40
      https://helpx.adobe.com/jp/security/products/shockwave/apsb17-40.html

      Adobe
      Adobe Experience Manager $B$K4X$9$k%;%-%e%j%F%#%"%C%W%G!<%H8x3+(B | APSB17-41
      https://helpx.adobe.com/jp/security/products/experience-manager/apsb17-41.html

      JPCERT/CC Alert 2017-11-15
       Adobe Flash Player $B$N@H<e@-(B (APSB17-33) $B$K4X$9$kCm0U4-5/(B
      https://www.jpcert.or.jp/at/2017/at170042.html

      JPCERT/CC Alert 2017-11-15
      Adobe Reader $B$*$h$S(B Acrobat $B$N@H<e@-(B (APSB17-36) $B$K4X$9$kCm0U4-5/(B
      https://www.jpcert.or.jp/at/2017/at170043.html

$B!Z(B3$B![(BMozilla Firefox $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Mozilla Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/11/14/Mozilla-Releases-Security-Updates

    $B35MW(B
      Mozilla Firefox $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T(B
      $B$,!"G$0U$N%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9(B
      $B$k$J$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Mozilla Firefox 57 $B$h$jA0$N%P!<%8%g%s(B
      - Mozilla Firefox ESR 52.5 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BMozilla Firefox $B$r(B Mozilla $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s(B
      $B$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BMozilla $B$,Ds6!$9$k>pJs$r;2>H$7$F$/(B
      $B$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Mozilla
      Mozilla Foundation Security Advisories (November 14, 2017)
      https://www.mozilla.org/en-US/security/advisories/

$B!Z(B4$B![(BOracle Tuxedo $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Oracle Releases Security Alert
      https://www.us-cert.gov/ncas/current-activity/2017/11/16/Oracle-Releases-Security-Alert

    $B35MW(B
      Oracle Tuxedo $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,(B
      $BG$0U$NA`:n$r9T$&2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Oracle Tuxedo 11.1.1$B!"(B12.1.1$B!"(B12.1.3$B!"(B12.2.2

      $B$3$NLdBj$O!"(BOracle Tuxedo $B$r(B Oracle $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99(B
      $B?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BOracle $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5(B
      $B$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Oracle
      Oracle Security Alert Advisory - CVE-2017-10269
      http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html

$B!Z(B5$B![(BCisco Voice Operating System $B$K%"%/%;%98"8BITHw$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Cisco Releases Security Update
      https://www.us-cert.gov/ncas/current-activity/2017/11/15/Cisco-Releases-Security-Update

    $B35MW(B
      Cisco Voice Operating System $B$N(B refresh upgrade (RU) $B5!G=$*$h$S(B Prime
      Collaboration Deployment (PCD) $B5!G=$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"(B
      $B1s3V$NBh;0<T$,G$0U$NA`:n$r9T$&2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O<!$N$H$*$j$G$9!#(B

      - Cisco Unified Communications Manager (UCM)
      - Cisco Unified Communication Manager Session Management Edition (SME)
      - Cisco Emergency Responder
      - Cisco Unity Connection
      - Cisco Unified Communications Manager IM and Presence Service (IM&P)
      - Cisco Prime License Manager
      - Cisco Hosted Collaboration Mediation Fulfillment
      - Cisco Unified Contact Center Express (UCCx)
      - Cisco SocialMiner
      - Cisco Unified Intelligence Center (UIC)
      - Cisco Finesse
      - Cisco MediaSense

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Cisco $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BCisco $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Cisco
      Cisco Voice Operating System-Based Products Unauthorized Access Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos

$B!Z(B6$B![(BWindows 8 $B$*$h$S$=$l0J9_$N%P!<%8%g%s$K$*$$$F(B ASLR $B$,E,@Z$K9T$o$l$J$$LdBj(B

    $B>pJs8;(B
      CERT/CC Vulnerability Note VU#817544
      Windows 8 and later fail to properly randomize every application if system-wide mandatory ASLR is enabled via EMET or Windows Defender Exploit Guard
      https://www.kb.cert.org/vuls/id/817544

    $B35MW(B
      EMET $B$*$h$S(B Windows Defender Exploit Guard $B$K$O!"%"%I%l%9$N%i%s%@%^%$(B
      $B%:$N@_Dj$rE,@Z$K9T$o$J$$LdBj$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,(B ASLR
      $B$r2sHr$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O<!$N$H$*$j$G$9!#(B

      - Windows 8 $B$*$h$S$=$l0J9_$N%P!<%8%g%s$K%$%s%9%H!<%k$5$l$F$$$k(B EMET
      - Windows 8 $B$*$h$S$=$l0J9_$N%P!<%8%g%s$K%$%s%9%H!<%k$5$l$F$$$k(B Windows Defender Exploit Guard

      2017$BG/(B11$B7n(B21$BF|8=:_!"BP:v:Q$_$N%P!<%8%g%s$O8x3+$5$l$F$$$^$;$s!#0J2<$N2s(B
      $BHr:v$rE,MQ$9$k$3$H$G!"K\@H<e@-$N1F6A$r7Z8:$9$k$3$H$,2DG=$G$9!#(B

      - $B%7%9%F%`A4BN$K(B ASLR $B$N6/@)$rE,MQ$9$k>l9g!"%7%9%F%`A4BN$N(B bottom-up ASLR $B$b9g$o$;$FM-8z$K$9$k(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#91363799
      Windows 8 $B$*$h$S$=$l0J9_$N%P!<%8%g%s$K$*$$$F!"%"%I%l%96u4VG[CV$N%i%s%@%`2=$,E,@Z$K9T$o$l$J$$@H<e@-(B
      https://jvn.jp/vu/JVNVU91363799/

$B!Z(B7$B![(BWordPress $BMQ%W%i%0%$%s(B TablePress $B$K(B XML $B30It<BBN;2>H(B (XXE) $B=hM}$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#05398317
      WordPress $BMQ%W%i%0%$%s(B TablePress $B$K$*$1$k(B XML $B30It<BBN;2>H(B (XXE) $B=hM}$N@H<e@-(B
      https://jvn.jp/jp/JVN05398317/

    $B35MW(B
      WordPress $BMQ%W%i%0%$%s(B TablePress $B$K$O!"(BXML $B30It<BBN;2>H(B (XXE) $B=hM}$N(B
      $B@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"Ev3:%W%i%0%$%s$N4IM}%Z!<%8$K%"%/%;%9$G$-(B
      $B$k!VEj9F<T!W0J>e$N8"8B$r;}$D%f!<%6$,!"G$0U$N%U%!%$%k$K%"%/%;%9$9$k2DG=(B
      $B@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - TablePress 1.8.1 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BTablePress $B$r3+H/<T$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7$9(B
      $B$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      TablePress
      Changelog
      https://wordpress.org/plugins/tablepress/#developers

$B!Z(B8$B![(BCS-Cart$BF|K\8lHG$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#29602086
      CS-Cart$BF|K\8lHG$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      https://jvn.jp/jp/JVN29602086/

    $B35MW(B
      CS-Cart$BF|K\8lHG$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-$,$"$j$^$9!#(B
      $B7k2L$H$7$F!"1s3V$NBh;0<T$,!"%f!<%6$N%V%i%&%6>e$GG$0U$N%9%/%j%W%H$r<B9T(B
      $B$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - CS-Cart$BF|K\8lHG%9%?%s%@!<%IHG(B v4.3.10 $B$*$h$S$=$l0JA0(B (v2$B7O!"(Bv3$B7O$O=|$/(B)
      - CS-Cart$BF|K\8lHG%^!<%1%C%H%W%l%$%9HG(B v4.3.10 $B$*$h$S$=$l0JA0(B (v2$B7O!"(Bv3$B7O$O=|$/(B)

      $B$3$NLdBj$O!"(BCS-Cart$BF|K\8lHG$rM-8B2q<R%U%m%C%0%^%s%*%U%#%9$,Ds6!$9$k=$(B
      $B@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"M-8B2q<R%U%m%C%0(B
      $B%^%s%*%U%#%9$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BM-8B2q<R%U%m%C%0%^%s%*%U%#%9(B
      $B!Z(BJVN#29602086$B![(B 2017$BG/(B11$B7n(B13$BF|$K8xI=$5$l$?(BXSS$B@H<e@-$X$NBP1~J}K!(B
      https://tips.cs-cart.jp/fix-jvn-29602086.html

$B!Z(B9$B![(BPacketbeat $B$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVNVU#94371484
      Packetbeat $B$K$*$1$k%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
      https://jvn.jp/vu/JVNVU94371484/

    $B35MW(B
      Packetbeat $B$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,!":Y9)$7(B
      $B$?%Q%1%C%H$rAw?.$9$k$3$H$G!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$&2DG=@-$,(B
      $B$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Packetbeat 5.6.4 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BPacketbeat $B$r(B Elastic $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BElastic $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Elastic
      Beats 5.6.4 security update
      https://discuss.elastic.co/t/beats-5-6-4-security-update/106739

$B!Z(B10$B![%m%\%C%H2HEE(B COCOROBO $B$K%;%C%7%g%s4IM}ITHw$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#76382932
      $B%m%\%C%H2HEE(B COCOROBO $B$K$*$1$k%;%C%7%g%s4IM}ITHw$N@H<e@-(B
      https://jvn.jp/jp/JVN76382932/

    $B35MW(B
      $B%m%\%C%H2HEE(B COCOROBO $B$K$O!"%;%C%7%g%s4IM}ITHw$N@H<e@-$,$"$j$^$9!#7k2L(B
      $B$H$7$F!"Bh;0<T$,!"G$0U$NA`:n$r<B9T$7$?$j!">pJs$r<hF@$7$?$j$9$k$J$I$N2D(B
      $BG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - RX-V200 $B%U%!!<%`%&%'%"(B $B%P!<%8%g%s(B 09.87.17.09 $B$h$jA0$N%P!<%8%g%s(B
      - RX-V100 $B%U%!!<%`%&%'%"(B $B%P!<%8%g%s(B 03.29.17.09 $B$h$jA0$N%P!<%8%g%s(B
      - RX-CLV1-P $B%U%!!<%`%&%'%"(B $B%P!<%8%g%s(B 79.17.17.09 $B$h$jA0$N%P!<%8%g%s(B
      - RX-CLV2-B $B%U%!!<%`%&%'%"(B $B%P!<%8%g%s(B 89.07.17.09 $B$h$jA0$N%P!<%8%g%s(B
      - RX-CLV3-N $B%U%!!<%`%&%'%"(B $B%P!<%8%g%s(B 91.09.17.10 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"%m%\%C%H2HEE(B COCOROBO $B$N%U%!!<%`%&%'%"$r%7%c!<%W3t<02q<R$,(B
      $BDs6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"%7%c!<(B
      $B%W3t<02q<R$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B%7%c!<%W3t<02q<R(B
      COCOROBO$B%"%C%W%G!<%H(B
      http://www.sharp.co.jp/cocorobo/manual/firmware.html


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{7P:Q;:6H>J$H(B IPA $B$,!V%5%$%P!<%;%-%e%j%F%#7P1D%,%$%I%i%$%s(B Ver2.0$B!W$r8x3+(B

      2017$BG/(B11$B7n(B16$BF|!"7P:Q;:6H>J$H>pJs=hM}?d?J5!9=(B (IPA) $B$O!"!V%5%$%P!<%;%-%e(B
      $B%j%F%#7P1D%,%$%I%i%$%s(B Ver2.0$B!W$r8x3+$7$^$7$?!#$3$N%,%$%I%i%$%s$O!"(B2016$BG/(B
      12$B7n$K4k6H$N7P1D<T$K8~$1$F8x3+$5$l$?!V%5%$%P!<%;%-%e%j%F%#7P1D%,%$%I%i(B
      $B%$%s(B Ver 1.1$B!W$N2~D{HG$G$9!#!V%5%$%P!<%;%-%e%j%F%#%j%9%/$KBP1~$9$k$?$a(B
      $B$N;EAH$_$N9=C[!W!"!VIUO?(BC $B%$%s%7%G%s%HH/@8;~$KAH?%Fb$G@0M}$7$F$*$/$Y$-(B
      $B;v9`!W$J$I$N9`L\$NDI2C$d!"4{B8$N=EMW9`L\$N:F@0M}$J$I$,9T$o$l$F$$$^$9!#(B

    $B;29MJ88%(B ($BF|K\8l(B)
      $B7P:Q;:6H>J(B
      $B%5%$%P!<%;%-%e%j%F%#7P1D%,%$%I%i%$%s(B
      http://www.meti.go.jp/policy/netsecurity/mng_guide.html

      $B7P:Q;:6H>J(B
      $B%5%$%P!<%;%-%e%j%F%#7P1D%,%$%I%i%$%s(B Ver2.0
      http://www.meti.go.jp/policy/netsecurity/downloadfiles/CSM_Guideline_v2.0.pdf


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        https://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2017 (C) JPCERT/CC
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJaFMxyAAoJEDF9l6Rp7OBIyxIIAI0tX7hd46Zfz2hCt5AgUTRx
ULj77K7qu8hO1CrtPZXsejRCVH8FYjjYlix8MpCDgNc9Jc3fvhQvLaRRBUqrVWj6
xgJKimovHpH3a8rkMWHx0giM4p4uwiBFwdBrMCEfUbcRRMxyvG/4VyDKyCCi/1H/
Aqmm+3zvAGNoX8aAkNgt2D7osXB2yzxSpI+5IW/mlPDPsZm1FdyUwUHEykcF5AH3
624Ol04WwhnC3U4jlHvu/0fD1WdRSIiVz9Q7/RMMjrA1Sq7GXL/lUmc+JOf8SPcT
4GZ+UMy72l8pZBAhxulsaJ4R61d80LkEJZuYXH6VhNouE4ao4UAbRFmGBYVOus0=
=U1IZ
-----END PGP SIGNATURE-----