Elbereth曰く、"JVNにて、gzipの脆弱性についていくつか報告があがっています。 JVNVU#933712: gzip (GNU zip) の huft_build() における NULL ポインタ参照の脆弱性 JVNVU#596848: gzip (GNU zip) の LZH の取扱いにおいて無限ループが引き起こされる脆弱性 JVNVU#554780: gzip におけるバッファオーバーフローの脆弱性 JVNVU#773548: gzip の LZH の取扱におけるバッファオーバーフローの脆弱性 JVNVU#381508: gzip の make_table() の配列処理における脆弱性 2006年9月22日現在では、JVNの上記記事では対象ベンダとしてRedhat、ubuntu、FreeBSDから報告があがっていますが、gzipのことであるからして影響はさらに広範囲になるも
タグ
- すべて
- 3DS (10)
- 3d (43)
- 4chan (12)
- Angel Beats! (31)
- CI (9)
- Cthulhu (11)
- DNS (25)
- DOM (47)
- MMD (86)
- MikuMikuDance (27)
- NHK (23)
- REST (10)
- TED (12)
- Thunderbolt (10)
- URI (10)
- WebAPI (9)
- academic (82)
- accessibility (40)
- actionscript (15)
- ad (99)
- addon (10)
- adobe (55)
- agile (32)
- ai (12)
- air (24)
- ajax (73)
- algorithm (85)
- amazon (56)
- america (38)
- analytics (10)
- android (92)
- animal (133)
- animation (31)
- anime (805)
- anonymous (12)
- apache (27)
- api (73)
- apple (150)
- aprilfool (11)
- ar (34)
- architecture (42)
- art (118)
- asmjs (10)
- astronomy (34)
- audio (20)
- azure (9)
- b2g (10)
- battery (19)
- benchmark (41)
- bicycle (71)
- binary (13)
- biology (36)
- blink (20)
- blog (89)
- book (606)
- bookmark (9)
- brain (27)
- browser (91)
- bug (21)
- business (159)
- c (14)
- cache (14)
- camera (15)
- canvas (49)
- captcha (15)
- car (24)
- career (15)
- cg (13)
- character (11)
- cheatsheet (18)
- chemical (20)
- chemistry (21)
- china (51)
- chrome (121)
- clannad (126)
- cloud (57)
- code (32)
- codec (18)
- coding (9)
- coffeescript (18)
- color (25)
- comic (11)
- communication (58)
- compatibility (19)
- compiler (9)
- compression (10)
- computer (42)
- cook (11)
- cookie (26)
- cooking (18)
- copyright (150)
- cpu (94)
- creative commons (14)
- crime (15)
- crypt (36)
- csp (10)
- css (325)
- css3 (28)
- culture (51)
- curry (13)
- dance (12)
- darcs (13)
- data (12)
- database (16)
- db (42)
- debug (64)
- design (183)
- design pattern (11)
- development (121)
- device (20)
- devops (16)
- dictionary (9)
- digg (15)
- display (24)
- docker (17)
- docomo (41)
- document (16)
- domain (23)
- dpz (68)
- drink (20)
- drm (28)
- drug (24)
- ds (17)
- e-learning (11)
- earth (16)
- earthquake (149)
- ebook (112)
- ecmascript (80)
- economics (57)
- economy (47)
- editor (13)
- education (305)
- emacs (32)
- emoji (23)
- energy (38)
- engadget (10)
- engineer (19)
- english (280)
- environment (18)
- epub (11)
- event (30)
- evernote (15)
- evolution (10)
- extension (33)
- facebook (32)
- fashion (43)
- filesystem (12)
- finance (19)
- firebug (26)
- firefox (642)
- firefox3 (12)
- flash (131)
- flex (10)
- flexbox (13)
- font (96)
- food (166)
- framework (14)
- functional (19)
- future (11)
- gadget (129)
- game (677)
- gc (24)
- gdgd妖精s (10)
- gender (10)
- generator (24)
- git (53)
- github (28)
- gmail (12)
- google (746)
- government (19)
- gpgpu (19)
- gpl (12)
- gpu (27)
- graph (9)
- graphics (12)
- greasemonkey (10)
- gtd (10)
- hack (11)
- hacker (9)
- hardware (50)
- haskell (297)
- hatena (113)
- hdd (25)
- health (119)
- heroku (10)
- history (131)
- hpc (22)
- html (119)
- html5 (232)
- http (52)
- iOS (17)
- ibm (9)
- idea (23)
- idolm@ster (9)
- ie (75)
- ie10 (22)
- ie6 (10)
- ie7 (10)
- ie9 (13)
- illust (61)
- image (33)
- ime (19)
- information (12)
- infrastructure (10)
- innovation (12)
- intel (113)
- interface (24)
- internet (41)
- interview (38)
- ipa (14)
- iphone (59)
- ipod (12)
- ipv6 (38)
- it (35)
- jQuery (120)
- japan (34)
- jasrac (10)
- java (33)
- javascript (652)
- jaxa (27)
- jetpack (15)
- job (29)
- jojo (13)
- json (22)
- kanon (9)
- kernel (19)
- key (184)
- keyboard (9)
- lain (13)
- language (59)
- law (167)
- layout (13)
- learning (25)
- less (10)
- librahack (10)
- library (148)
- life (150)
- lifehack (29)
- linus (9)
- linux (148)
- lisp (13)
- literature (33)
- livedoor (9)
- llvm (12)
- logic (15)
- logo (13)
- mac (97)
- machine learning (9)
- machinelearning (13)
- mad (18)
- mail (18)
- management (11)
- manga (159)
- map (31)
- market (24)
- marketing (36)
- mashup (13)
- material (13)
- math (86)
- mathematics (12)
- mathjax (10)
- matz (20)
- media (93)
- medical (112)
- memory (68)
- mental (17)
- metro (9)
- miau (12)
- microdata (9)
- microsoft (187)
- military (25)
- mindmap (9)
- mixi (21)
- mobile (231)
- monad (25)
- money (11)
- movie (61)
- mozilla (152)
- mruby (10)
- music (237)
- mvc (17)
- mysql (27)
- name (18)
- nature (22)
- neta (1298)
- network (66)
- news (119)
- niconico (143)
- nintendo (75)
- nlp (26)
- node.js (39)
- novel (12)
- nvidia (14)
- oauth (22)
- office (18)
- open source (9)
- openid (22)
- opensource (16)
- opera (30)
- opus (13)
- oracle (10)
- os (29)
- oss (37)
- otaku (26)
- p2p (34)
- paper (29)
- parser (9)
- password (26)
- patent (42)
- pattern (12)
- paul graham (18)
- payment (9)
- pc (9)
- pdf (21)
- performance (89)
- perl (21)
- phone (18)
- photo (86)
- photoshop (10)
- physics (60)
- plagger (17)
- plugin (10)
- podcast (29)
- politics (41)
- power (11)
- presentation (41)
- privacy (123)
- programmer (10)
- programming (447)
- ps3 (26)
- psychology (68)
- publishing (10)
- rails (94)
- random (9)
- reference (13)
- religion (18)
- research (154)
- review (11)
- rewrite (18)
- rfc (10)
- robot (103)
- rss (13)
- ruby (312)
- rubykaigi (15)
- rubykaigi2008 (15)
- safari (10)
- sbm (13)
- scalability (17)
- science (573)
- search (68)
- security (926)
- server (37)
- service (27)
- sf (40)
- sharp (9)
- skype (9)
- sns (21)
- society (15)
- software (36)
- sony (31)
- space (72)
- spam (20)
- spdy (55)
- sports (54)
- sql (11)
- ssd (43)
- ssl (27)
- standard (27)
- startup (9)
- stationery (14)
- statistics (57)
- steve jobs (23)
- storage (24)
- study (23)
- svg (52)
- tdd (16)
- technology (261)
- template (14)
- test (56)
- tips (10)
- tool (54)
- translation (31)
- transport (16)
- tv (9)
- twitter (173)
- ubuntu (30)
- ui (160)
- unicode (30)
- usability (13)
- ustream (14)
- ux (13)
- video (32)
- virtualization (17)
- virus (14)
- visualization (43)
- vm (13)
- vmware (9)
- vocaloid (100)
- w3c (56)
- wave (20)
- web (166)
- web2.0 (65)
- webgl (78)
- webkit (31)
- webm (9)
- webrtc (43)
- websocket (22)
- whatwg (22)
- wifi (11)
- wii (144)
- wiki (14)
- wikipedia (40)
- windows (67)
- windows 7 (10)
- winny (10)
- word (13)
- work (94)
- writing (69)
- xml (12)
- xss (41)
- yahoo! (46)
- yapc (11)
- youtube (483)
- zelda (10)
- あとで読む (123)
- いつか読む (108)
- いつか読むかも (318)
- いぬ (28)
- かわいい (17)
- けいおん！ (76)
- これはかわいい (11)
- これはすごい (201)
- これはひどい (59)
- ねこ (235)
- はやぶさ (108)
- べつやくれい (27)
- まどか☆マギカ (84)
- らき☆すた (49)
- エヴァンゲリオン (44)
- ニセ科学 (30)
- リトルバスターズ！ (45)
- 初音ミク (103)
- 地獄のミサワ (12)
- 宮本茂 (11)
- 将棋 (65)
- 小野ほりでい (28)
- 新海誠 (16)
- 日常 (50)
- 東浩紀 (23)
- 涼宮ハルヒ (277)
- 疑似科学 (19)
- 輪るピングドラム (15)
- 麻枝准 (22)
- neta (1298)
- security (926)
- anime (805)
- google (746)
- game (677)
- javascript (652)
- firefox (642)
- book (606)
- science (573)
- youtube (483)
securityとgzipに関するtaninswのブックマーク (1)
-
taninsw 2006/09/23
・・・これは・・アップデートめんどくさいです・・・。- lha
- security
- gzip
リンク -
1
公式Twitter
- @HatenaBookmark
リリース、障害情報などのサービスのお知らせ
- @hatebu
最新の人気エントリーの配信
処理を実行中です
キーボードショートカット一覧
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
設定を変更しましたx