(PVS) Signatures - Tenable Network Security

the MIME handling code use unsafe versions of string routines (MFSA 2008-26).\n\n - An
improperly encoded '.properties' file in an add-on can result in uninitialized memory being
used, which could lead to data formerly used by other programs being exposed to the
add-on code (MFSA 2008-29).\n\n - A weakness in the trust model regarding alt names on
peer-trusted certs could lead to spoofing secure connections to any other site (MFSA
2008-31).\n\n - A crash in Mozilla's block reflow code could be used by an attacker to crash
the browser and run arbitrary code on the victim's computer (MFSA 2008-33).\n\n - By
creating a very large number of references to a common CSS object, an attacker can
overflow the CSS reference counter, causing a crash when the browser attempts to free the
CSS object while still in use and allowing for arbitrary code execution (MFSA 2008-34).
Solution: Upgrade to version 2.0.0.16 or higher.
CVE-2008-2785
CUPS < 1.3.8 Crafted PNG File Integer Overflow
PVS ID: 4610 FAMILY: Web Servers RISK: HIGH NESSUS ID:33577
Description: Synopsis :\n\nThe remote printer service is affected by a buffer overflow
vulnerability.\n\nAccording to its banner, the version of CUPS installed on the remote host
is affected by an integer overflow. Using a specially crafted PNG file with overly long
width and height fields, a remote attacker can leverage this issue to crash the affected
service and may allow execution of arbitrary code.
Solution: Upgrade to version 1.3.8 or higher.
CVE-2008-1722
AVG Scanning Engine < 8.0.156 UPX Parsing DoS
PVS ID: 4611 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:33762
Description: Synopsis : \n\nThe remote Windows host contains an application that is affected by a denial
of service vulnerability.\n\nAVG Anti-Virus is installed on the remote Windows host. The
version of AVG Anti-Virus installed on the remote host is affected by a 'UPX' file parsing
flaw. An attacker can trigger a divide-by-zero error by causing the application to process a
specially crafted 'UPX' file, which would result in a denial of service condition. The
reported version, build and license key is: \n %L
Solution: Upgrade to version 8.0.156 or higher.
CVE-2008-3373
DB2 < 9.5 Fix Pack 1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4612 FAMILY: Database RISK: HIGH NESSUS ID:33763
Family Internet Services 1207