======================================================================
  InfoFrame DocumentSkipper V5.1 CW[ [X
                                                          2014/05/28
======================================================================

Apache StrutsɐƎ㐫(CVE-2014-0094, CVE-2014-0112, CVE-2014-0113) 񍐂܂B
{[X́AInfoFrame DocumentSkipperstruts̐Ǝ㐫(CVE-2014-0094,
CVE-2014-0112, CVE-2014-0113)ɊւCłB

Ήe
@DocumentSkipperT[rX
@@struts̐Ǝ㐫ŖƂȂURLtB^[AƂȂURLɃANZXꍇ
@@ANZXۂ悤ɏC

Ή
@DocumentSkipper V5.1
@JDK 1.5
@Tomcat 6.0.16

[X

t@CpX                           XV            TCY(byte)
-----------------------------------------------------------------------
bin
 + SetCharacterEncodingFilter.class    2014/05/13 10:57    3,516
-----------------------------------------------------------------------

W[̓Kp@
Kp邽߂ɂTomcat̍ċNKvƂȂ܂̂łӂ

1.TomcatT[rX~
@Rg[plǗc[T[rXJAApache Tomcat~

2.CW[̔zu
@uTomcatCXg[tH_\webapps\DocumentSkipper\WEB-INF\classes\com\nec\jp\documentskipper\search\pluginvtH_
@SetCharacterEncodingFilter.classRs[

3.ݒt@C̏C
@uTomcatCXg[tH_\webapps\DocumentSkipper\WEB-INF\web.xmlveLXgGfB^filter^Oȉ̂悤ɏ

     <filter>
        <filter-name>Set Character Encoding</filter-name>
        <filter-class>com.nec.jp.documentskipper.common.servlet.SetCharacterEncodingFilter</filter-class>
        <init-param>
            <param-name>encoding</param-name>
            <param-value>UTF-8</param-value>
        </init-param>
    </filter>

ȉ̂悤ɕύX

     <filter>
        <filter-name>Set Character Encoding</filter-name>
<!--        <filter-class>com.nec.jp.documentskipper.common.servlet.SetCharacterEncodingFilter</filter-class>	-->
	<filter-class>com.nec.jp.documentskipper.search.plugin.SetCharacterEncodingFilter</filter-class>
        <init-param>
            <param-name>encoding</param-name>
            <param-value>UTF-8</param-value>
        </init-param>
    </filter>


4.TomcatT[rXJn
@Rg[plǗc[T[rXJAApache TomcatJn

Kp̊mF@
1.Internet ExplorerN܂B

2.AhXo[DocumentSkipperURL̃p[^ɐK\@(^|\\W)[cC]lass\\W@
  vp[^w肵Ďs܂B

  mFURL@http://localhost/DocumentSkipper/bookViewer.do?class.classLoader=test

3.uT[oŃG[܂vƂbZ[W̃G[ʂ\ΐKpĂ܂


                                                               ȏ
