(PVS) Signatures - Tenable Network Security

code used to normalize a document contains a logical flaw that could be leveraged to run
arbitrary code. (MFSA 2010-57)\n\n - A specially crafted font can be applied to a document
and cause a crash on Mac systems. (MFSA 2010-58)\n\n - The wrapper class
'XPCSafeJSObjectWrapper' (SJOW) creates scope chains ending in outer objects. (MFSA
2010-59)\n\n - The 'type' attribute of an tag can override the charset of a framed
HTML document even when the document is included across origins. (MFSA 2010-61)\n\n
- When an HTML selection containing JavaScript is copy-and-pasted or dropped onto a
document with designMode enabled, the JavaScript will be executed within the context of
the site where the code was dropped. (MFSA 2010-62)\n\n - The 'statusText' property of an
'XMLHttpRequest' object is readable by the requestor even when the request is made across
origins. (MFSA 2010-63)
Solution: Upgrade to Mozilla Thunderbird 3.1.3 or later.
CVE-2010-3169
SeaMonkey < 2.0.7 Multiple Vulnerabilities
PVS ID: 5660 FAMILY: Web Clients RISK: HIGH NESSUS ID:49149
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of SeaMonkey is
%L.\n\nVersions of SeaMonkey earlier than 2.0.7 are potentially affected by multiple
vulnerabilities :\n\n - Multiple memory safety issues that could lead to arbitrary code
execution. (MFSA 2010-49)\n\n - The implementation of the HTML frameset element
contains an integer overflow vulnerability. (MFSA 2010-50)\n\n - A dangling pointer
vulnerability exists in the implementation of 'navigator.plugins' in which the 'navigator'
object could retain a pointer to the plugins array even after it has been destroyed. (MFSA
2010-51)\n\n - SeaMonkey can be used to load a malicious code library that has been
planted on a victim's computer. (MFSA 2010-52)\n\n - A heap buffer overflow exists in
code routines responsible for transforming text runs. (MFSA 2010-53)\n\n - A dangling
pointer issue remains leftover from the fix for CVE-2010-2753. (MFSA 2010-54)\n\n -
XUL '' objects can be manipulated such that the setting of certain properties on the
object would trigger the removal of the tree from the DOM and cause certain sections of
deleted memory to be accessed. (MFSA 2010-55)\n\n - The implementation of the XUL
'' content view contains a dangling pointer vulnerability. (MFSA 2010-56)\n\n - The
code used to normalize a document contains a logical flaw that could be leveraged to run
arbitrary code. (MFSA 2010-57)\n\n - A specially crafted font can be applied to a document
and cause a crash on Mac systems. (MFSA 2010-58)\n\n - The 'type' attribute of an
tag can override the charset of a framed HTML document even when the
document is included across origins. (MFSA 2010-61)\n\n - When an HTML selection
containing JavaScript is copy-and-pasted or dropped onto a document with designMode
enabled, the JavaScript will be executed within the context of the site where the code was
dropped. (MFSA 2010-62)\n\n - The 'statusText' property of an 'XMLHttpRequest' object is
readable by the requestor even when the request is made across origins. (MFSA 2010-63)
Solution: Upgrade to Mozilla SeaMonkey 2.0.7 or later.
CVE-2010-3169
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1526