(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe
remote host is an iPhone, iPod Touch, or iPad running iOS. For your information,
the observed version of iOS is %L.\n\nVersions of iOS earlier than 4.0 are
potentially affected by multiple vulnerabilities. iOS 4.0 contains security fixes for
the following products :\n\n - Application Sandbox\n\n - CFNetwork\n\n -
ImageIO\n\n - LibSystem\n\n - libxml\n\n - Passcode Lock\n\n - Safari\n\n -
Settings\n\n - WebKit
Solution: Upgrade to iOS 4.0 or later.
CVE-2010-2660
Firefox < 3.5.10 Multiple Vulnerabilities
PVS ID: 5579 FAMILY: Web Clients RISK: HIGH NESSUS ID:47123
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of Firefox is %L.\n\nVersions
of Firefox earlier than 3.5.10 are potentially affected by multiple vulnerabilities :\n\n - A
re-use of a freed object due to scope confusion. (MFSA 2010-25)\n\n - Multiple crashes can
result in code execution. (MFSA 2010-26)\n\n - A use-after-free error in
nsCycleCollector::MarkRoots(). (MFSA 2010-27)\n\n - Freed object reuse across plugin
instances. (MFSA 2010-28)\n\n - A heap buffer overflow in
nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)\n\n - An integer overflow in
XSLT node sorting. (MFSA 2010-30)\n\n The focus() behavior can be used to inject or
steal keystrokes. (MFSA 2010-31)\n\n- The 'Content-Disposition: attachment' HTTP
header is ignored when 'Content-Type: multipart' is also present. (MFSA 2010-32)\n\nIt is
possible to reverse engineer the value used to seed Math.random(). (MFSA 2008-33)
Solution: Upgrade to Mozilla Firefox 3.5.10 or later.
CVE-2010-1203
Firefox 3.6.x < 3.6.4 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5580 FAMILY: Web Clients RISK: HIGH NESSUS ID:47124
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of Firefox is %L.\n\nVersions
of Firefox 3.6.x earlier than 3.6.4 are potentially affected by multiple vulnerabilities :\n\n -
Multiple crashes can result in code execution. (MFSA 2010-26)\n\n - Freed object reuse
across plugin instances. (MFSA 2010-28)\n\n - A heap buffer overflow in
nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)\n\n - An integer overflow in
XSLT node sorting. (MFSA 2010-30)\n\n The focus() behavior can be used to inject or
steal keystrokes. (MFSA 2010-31)\n\n- The 'Content-Disposition: attachment' HTTP
header is ignored when 'Content-Type: multipart' is also present. (MFSA 2010-32)\n\nIt is
possible to reverse engineer the value used to seed Math.random(). (MFSA 2008-33)
Solution: Upgrade to Mozilla Firefox 3.6.4 or later.
Family Internet Services 1497