(PVS) Signatures - Tenable Network Security

492592)\n\nThe reported version of eDirectory is : \n %L
Solution: Upgrade to eDirectory 8.8 SP5 or later.
CVE-2009-0192
Google Chrome < 2.0.172.37 Buffer Overflow
PVS ID: 5099 FAMILY: Web Clients RISK: HIGH NESSUS ID:39852
Description: Synopsis : \n\nThe remote host contains a web browser that is vulnerable multiple attack
vectors.\n\nThe version of Google Chrome installed on the remote host is earlier than
2.0.172.37. Such versions are reportedly affected by multiple vulnerabilities : \n\n - A heap
overflow exists when evaluating specially crafted regular expressions in Javascript. This
could lead to a denial of service or the remote execution of arbitrary code withing the
Google Chrome sandbox.\n\n - A memory corruption issue exists in the renderer process
that could cause a denial of service or possibly allow arbitrary code execution with the
privileges of the logged on user. \n\n - A denial-of-service issue when the application
handles a maliciously crafted webpage containing a 'HTMLSelectElement' object with a
large length attribute.\n\nThe reported version of Google Chrome is: \n %L
Solution: Upgrade to Google Chrome 2.0.172.37 or later.
CVE-2009-2535
RealNetworks Helix Server 12.x Multiple DoS
PVS ID: 5100 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:40350
Description: Synopsis :\n\nThe remote media streaming server is affected by multiple denial of service
vulnerabilities.\n\nAccording to its banner, The remote host is running version 12.x of
RealNetworks Helix Server / Helix Mobile Server. Such versions are reportedly affected by
multiple issues :\n\n - By sending a specially crafted 'RTSP' (SET_PARAMETERS)
request with 'DataConvertBuffer' parameter set to empty, an attacker may be able to crash
the remote Helix server process. (CVE-2009-2533)\n\n - By sending a 'SETUP' request
without including a '/' character in it, a remote attacker may be able to crash the remote
Helix server process. (CVE-2009-2534)
Solution: Update to RealNetworks Helix Server / Helix Mobile Server 13.0.0 or later.
CVE-2009-2534
Firefox < 3.0.12 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5101 FAMILY: Web Clients RISK: HIGH NESSUS ID:40351
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors\n\nThe installed
version of Firefox is earlier than 3.0.12. Such versions are potentially affected by the
following security issues :\n\n - Multiple memory corruption vulnerabilities could
potentially be exploited to execute arbitrary code. (MFSA 2009-34)\n\n - It may be possible
Family Internet Services 1353