(PVS) Signatures - Tenable Network Security

PVS ID: 5219 FAMILY: Web Clients RISK: HIGH NESSUS ID:42307
Description: Synopsis : \n\nThe remote host is running a web browser that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla SeaMonkey earlier than
2.0. Such versions are potentially affected by multiple vulnerabilities : \n\n - A flaw exists
in the parsing of regular expressions used in Proxy Auto-configuration (PAC) files. (MFSA
2009-55)\n\n - A heap-based buffer overflow exists in Mozilla's GIF image parser. (MFSA
2009-56)\n\n - When downloading a file containing a right-to-left override character (RTL)
in the filename, the name displayed in the dialog title bar conflicts with the name of the file
shown in the dialog body. (MFSA 2009-62)\n\nFor your information, the observed version
of Mozilla SeaMonkey is: \n %L
Solution: Upgrade to Mozilla SeaMonkey 2.0 or later.
CVE-2009-3376
MS09-061: Vulnerabilities in the Microsoft .NET Framework 1.1 Common Language Runtime Could
Allow Remote Code Execution (974378)
PVS ID: 5220 FAMILY: Web Servers RISK: HIGH NESSUS ID:42117
Description: Synopsis :\n\nThe remote .NET Framework 1.1 is vulnerable to remote code execution
attacks.\n\nThe remote host is running a version of the .NET Framework 1.1 which is
potentially affected by multiple vulnerabilities :\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that could allow a malicious
Microsoft .NET Framework application to obtain a managed pointer to stack memory that
is no longer used. (CVE-2009-0090)\n\n - A remote code execution vulnerability exists in
the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to
bypass a type equality check. (CVE-2009-0091)\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that can allow a malicious Microsoft
.NET application to modify memory of the attacker's choice. (CVE-2009-2497)\n\nFor
your information, the observed version of Microsoft .NET is\n%L
Solution: Apply the patches referenced in Microsoft's security bulletin.
CVE-2009-0091
Passive Vulnerability Scanner (PVS) Signatures
MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 Common Language Runtime Could
Allow Remote Code Execution (974378)
PVS ID: 5221 FAMILY: Web Servers RISK: HIGH NESSUS ID:42117
Description: Synopsis :\n\nThe remote .NET Framework 2.0 is vulnerable to remote code execution
attacks.\n\nThe remote host is running a version of the .NET Framework 2.0 which is
potentially affected by multiple vulnerabilities :\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that could allow a malicious
Microsoft .NET Framework application to obtain a managed pointer to stack memory that
is no longer used. (CVE-2009-0090)\n\n - A remote code execution vulnerability exists in
the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to
bypass a type equality check. (CVE-2009-0091)\n\n - A remote code execution
vulnerability exists in the Microsoft .NET Framework that can allow a malicious Microsoft
Family Internet Services 1391