(PVS) Signatures - Tenable Network Security

CVE-2010-1203
SeaMonkey < 2.0.5 Multiple Vulnerabilities
PVS ID: 5581 FAMILY: Web Clients RISK: HIGH NESSUS ID:47126
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of SeaMonkey is
%L.\n\nVersions of SeaMonkey earlier than 2.0.5 are potentially affected by multiple
vulnerabilities :\n\n A re-use of a freed object due to scope confusion. (MFSA 2010-25)\n\n
- Multiple crashes can result in code execution. (MFSA 2010-26)\n\n - A use-after-free
error in nsCycleCollector::MarkRoots(). (MFSA 2010-27)\n\n - Freed object reuse across
plugin instances. (MFSA 2010-28)\n\n - A heap buffer overflow in
nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)\n\n - An integer overflow in
XSLT node sorting. (MFSA 2010-30)\n\n The focus() behavior can be used to inject or
steal keystrokes. (MFSA 2010-31)\n\n- The 'Content-Disposition: attachment' HTTP
header is ignored when 'Content-Type: multipart' is also present. (MFSA 2010-32)\n\nIt is
possible to reverse engineer the value used to seed Math.random(). (MFSA 2008-33)
Solution: Upgrade to Mozilla SeaMonkey 2.0.5 or later.
CVE-2010-1203
Mozilla Thunderbird < 3.0.5 Multiple Vulnerabilities
PVS ID: 5582 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:47125
Description: Synopsis :\n\nThe remote host has an email client that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Thunderbird is %L.\n\nVersions
of Thunderbird earlier than 3.0.5 are potentially affected by multiple vulnerabilities :\n\n -
A re-use of a freed object due to scope confusion. (MFSA 2010-25)\n\n - Multiple crashes
can result in arbitrary code execution. (MFSA 2010-26)\n\n - A heap buffer overflow in
nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)\n\nAn integer overflow in
XSLT node sorting. (MFSA 2010-30)
Solution: Upgrade to Mozilla Thunderbird 3.0.5 or later.
CVE-2010-1203
EvoCam < 3.6.8 GET Request Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5583 FAMILY: Web Servers RISK: HIGH NESSUS ID:47682
Description: Synopsis :\n\nThe remote host contains an application that is affected by a buffer overflow
vulnerability.\n\nThe remote host is running EvoCam, a webcam application for Mac OS
X. For your information, the observed version of EvoCam is %L.\n\nVersions of EvoCam
earlier than 3.6.8 are potentially affected by a buffer overflow vulnerability in the web
server when handling specially crafted GET requests. An attacker, exploiting this flaw,
could execute arbitrary code on the remote host subject to the privileges of the user running
the affected software.
Family Internet Services 1498