(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome installed on the
remote host is : %L\n\nVersions of Google Chrome earlier than 5.0.375.70 are potentially
affected by multiple vulnerabilities :\n\n - A cross-origin keystroke redirection
vulnerability. (Bug 15766)\n\n - A cross-origin bypass in DOM methods. (Bug 39985)\n\n -
A memory error exists in table layout. (Bug 42723)\n\n - It is possible to escape the
sandbox in Linux. (Bug 43304)\n\n - A stale pointer exists in bitmap. (Bug 43307) - A
memory corruption vulnerability exists in DOM mode normalization. (Bug 43315)\n\n - A
memory corruption vulnerability exists in text transforms. (Bug 43487)\n\n - A cross-site
scripting vulnerability exists in the innerHTML property of textarea. (Bug 43902)\n\n - A
memory corruption vulnerability exists in font handling. (Bug 44740)\n\n - Geolocation
events fire after document deletion. (Bug 44868)\n\n - A memory corruption vulnerability
exists in the rendering of list markers. (44955)
Solution: Upgrade to Google Chrome 5.0.375.70 or later.
CVE-2010-1773
PRTG Traffic Grapher < 6.2.1.963 / 9.2.1.964 Cross-Site Scripting Vulnerability
PVS ID: 5568 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:46857
Description: Synopsis :\n\nThe remote host contains a web application that is vulnerable to a cross-site
scripting attack.\n\nThe remote host is running PRTG Traffic Grapher, a web-based
application for monitoring network traffic. For your information, the observed version of
PRTG Traffic Grapher on the remote host is %L.\n\nVersions of PRTG Traffic Graher
earlier than 6.2.1.963 / 9.2.1.964 are potentially affected by a cross-site scripting
vulnerability in the 'url' parameter of the 'login.htm' script. An unauthenticated remote
attacker, exploiting this flaw, could execute arbitrary script code in a user's browser.
Solution: Upgrade to PRTG Traffic Grapher 6.2.1.963, 6.2.1.964, or later.
CVE Not available
Flash Player < 10.1.53.64 / 9.0.277.0 Multiple Vulnerabilities (APSB10-14)
PVS ID: 5569 FAMILY: Web Clients RISK: HIGH NESSUS ID:46859
Description: Synopsis :\n\nThe remote host contains a browser plug-in that is vulnerable to multiple
attack vector.\n\nFor your information, the observed version of Flash player is
%L.\n\nVersions of Flash Player earlier than 10.1.53.64 are potentially affected by multiple
vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that
could be exploited to cause an application crash or even allow execution of arbitrary code.
Solution: Upgrade to Flash Player 10.1.53.64 / 9.0.277.0 or later.
CVE-2010-2189
Passive Vulnerability Scanner (PVS) Signatures
Novell eDirectory < 8.8 SP5 Patch 4 Multiple Vulnerabilities
Family Internet Services 1493