(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla SeaMonkey earlier than
2.0.4. Such versions are potentially affected by multiple security issues : \n\n - Multiple
crashes can result in arbitrary code execution. (MFSA 2010-16)\n\n - A select event
handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)\n\n -
An error exists in the way '' elements are inserted into a XUL tree ''.
(MFSA 2010-18)\n\n - An error exists in the implementation of the
'windows.navigator.plugins' object. (MFSA 2010-19)\n\n - A browser applet can be used to
turn a simple mouse click into a drag-and-drop action, potentially resulting in the
unintended loading of resources in a user's browser. (MFSA 2010-20)\n\n Session
renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext
by a man-in-the-middle. (MFSA 2010-22)\n\n - When an image points to a resource that
redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA
2010-23)\n\n - XML documents fail to call certain security checks when loading new
content. (MFSA 2010-24)\n\nFor your information, the observed version of SeaMonkey is:
\n %L \nIAVA Reference : 2011-A-0107\nIAVB Reference : 2012-B-0038\nSTIG Finding
Severity : Category I
Solution: Upgrade to Mozilla SeaMonkey 2.0.4 or later.
CVE-2010-0182
Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities
PVS ID: 5496 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:45394
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla Thunderbird earlier than
3.0.4. Such versions are potentially affected by multiple security issues : \n\n - Multiple
crashes can result in arbitrary code execution. (MFSA 2010-16)\n\n - A select event
handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)\n\n -
An error exists in the way '' elements are inserted into a XUL tree ''.
(MFSA 2010-18)\n\n Session renegotiations are not handled properly, which can be
exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)\n\n - XML
documents fail to call certain security checks when loading new content. (MFSA
2010-24)\n\nFor your information, the observed version of Thunderbird is: \n %L \nIAVA
Reference : 2011-A-0107\nIAVB Reference : 2012-B-0038\nSTIG Finding Severity :
Category I
Solution: Upgrade to Mozilla Thunderbird 3.0.4 or later.
CVE-2010-0182
DNS Generic Query Detection
PVS ID: 5497 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: DNS query for:
realtimeonly
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1470