(PVS) Signatures - Tenable Network Security

Apple iPhone OS < 3.1.3 Multiple Vulnerabilities
PVS ID: 5337 FAMILY: Mobile Devices RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is an iPhone with an OS version earlier than 3.1.3. Such versions are potentially affected by
multiple vulnerabilities : \n\n - A buffer overflow exists in the handling of mp4 audio files.
(CVE-2010-0036)\n\n - A buffer underflow exists in ImageIO's handling of TIFF images.
(CVE-2009-2285)\n\n - A memory corruption issue exists in the handling of a certain USB
control message. (CVE-2010-0038)\n\n - Multiple input validation issues exist in WebKit's
handling of FTP directory listings. (CVE-2009-3384)\n\n - When WebKit encounters an
HTML 5 Media Element pointing to an external resource, it does not issue a resource load
callback to determine if the resource should be loaded. (CVE-2009-2841)\n\nFor your
information, the observed version of iPhone OS is: \n %L
Solution: Upgrade to iPhone OS 3.1.3 or later.
CVE-2010-0038
Flash Player < 10.0.45.2 Multiple Vulnerabilities
PVS ID: 5338 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:44596
Description: Synopsis : \n\nThe remote host contains a browser plug-in that is vulnerable to multiple
attack vectors.\n\nThe remote host conatains a version of Adobe Flash Player that is earlier
than 10.0.45.2. Such versions are potentially affected by multiple vulnerabilities : \n\n - An
issue which could subvert the domain sandbox and make unauthorized cross-domain
requests. (CVE-2010-0186)\n\n - An unspecified denial of service.
(CVE-2010-0187)\n\nFor your information, the observed version of Flash player is: \n %L
Solution: Upgrade to Adobe Flash Player 10.0.45.2 or later.
CVE-2010-0187
OpenOffice < 3.2 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5339 FAMILY: Generic RISK: HIGH NESSUS ID:44597
Description: Synopsis : \n\nThe remote host has a program that is vulnerable to multiple attack
vectors.\n\nThe version of OpenOffice installed on the remote host is earlier than 3.2. Such
versions are potentially affected by several issues : \n\n - Signatures may not be handled
properly due to a vulnerability in the libxml2 library. (CVE-2006-4339)\n\n - There is an
HMAC truncation authentication bypass vulnerability in the libxmlsec library.
(CVE-2009-0217)\n\n - The application is bundled with a vulnerable version of the
Microsoft VC++ runtime. (CVE-2009-2493)\n\n - Specially crafted XPM files are not
processed properly, which could lead to arbitrary code execution. (CVE-2009-2949)\n\n -
Specially crafted GIF files are not processed properly, which could lead to arbitrary code
execution. (CVE-2009-2950)\n\n - Specially crafted Microsoft Word documents are not
processed properly, which could lead to arbitrary code execution. (CVE-2009-3301 /
CVE-2009-3302)\n\nFor your information, the observed version of OpenOffice is: \n %L
Family Internet Services 1429