(PVS) Signatures - Tenable Network Security

arbitrary code execution. (MFSA 2010-011)\n\n - A cross-site scripting issue when using
'addEventListener' and 'setTimeout' on a wrapped object. (MFSA 2010-12)\n\n - It is
possible to corrupt a user's XUL cache. (MFSA 2010-14)\n\nFor your information, the
observed version of Firefox is: \n %L
Solution: Upgrade to Mozilla Firefox 3.0.18, 3.5.8, 3.6, or later.
CVE-2010-0171
Mozilla SeaMonkey < 2.0.3 Multiple Vulnerabilities
PVS ID: 5343 FAMILY: Web Clients RISK: HIGH NESSUS ID:44660
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla SeaMonkey earlier than
2.0.3. Such versions are potentially affected by multiple vulnerabilities : \n\n - Several
crashes can result in arbitrary code execution. (MFSA 2010-01)\n\n - The implementation
of 'Web Workers' contains an error in its handling of array data types when processing
posted messages. (MFSA 2010-02)\n\n - The HTML parser incorrectly frees used memory
when insufficient space is available to process remaining input. (MFSA 2010-03)\n\n - A
cross-site scripting issue due to 'window.dialogArguments' being readable cross-domain.
(CVE-2010-04)\n\n - A cross-site scripting issue when using SVG documents and binary
Content-Type. (MFSA 2010-05)\n\n - Multiple crashes can result in arbitrary code
execution. (MFSA 2010-11)\n\n - A cross-site scripting issue when using
'addEventListener' and 'setTimeout' on a wrapped object. (MFSA 2010-12)\n\nFor your
information, the observed version of SeaMonkey is: \n %L
Solution: Upgrade to Mozilla SeaMonkey 2.0.3 or later.
CVE-2010-0171
Sawmill < 7.2.18 Unspecified Cross-Site Scripting Vulnerability
PVS ID: 5344 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server is vulnerable to a cross-site scripting attack.\n\nThe
host is running Sawmill, a log analysis and reporting application. The installed version of
Sawmill is earlier than 7.2.18. Such versions are potentially affected by a cross-site
scripting vulnerability. An attacker, exploiting this flaw, could execute arbitrary script code
in a user's browser. For your information, the observed version of Sawmill is: \n %L
Solution: Upgrade to Sawmill 7.2.18 or later.
CVE-2010-1079
SilverStripe < 2.3.6 Multiple Vulnerabilities
PVS ID: 5345 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:44941
Family Internet Services 1431