(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 7.0.517.44 are potentially affected by
multiple vulnerabilities :\n\n - A use-after-free error exists in text editing. (51602)\n\n - A
memory corruption error exists relating to enormous text area. (55257)\n\n - A bad cast
exists with the SVG use element. (58657)\n\n - An invalid memory read exists in XPath
handling. (58731)\n\n - A use-after-free error exists in text-control-selections. (58741)\n\n -
Multiple integer overflows exists in font handling. (59320)\n\n - A memory corruption
issue exists in libvpx. (60055)\n\n - A bad use of a destroyed frame object exists.
(60238)\n\n - Multiple type confusions exists with event objects. (60327, 60769,
61255)\n\n - An out-of-bounds array access exists in SVG handling. (60688)
Solution: Upgrade to Google Chrome 7.0.517.44 or later.
CVE-2010-4206
Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)
PVS ID: 5699 FAMILY: Web Clients RISK: HIGH NESSUS ID:50493
Description: Synopsis :\n\nThe remote host contains a browser plug-in that is vulnerable to multiple
attack vectors.\n\nThe remote host has Adobe Flash Player installed. For your information,
the observed version of Adobe Flash Player is %L.\nVersions of Flash Player 9.x earlier
than 9.0.289 and 10.x earlier than 10.1.102.64 are potentially affected by multiple
vulnerabilities :\n\n - A memory corruption vulnerability exists that could lead to code
execution. Note that there are reports that this is being actively exploited in the wild.
(CVE-2010-3654)\n\n - An input validation issue exists that could lead to a bypass of
cross-domain policy file restrictions with certain server encodings. (CVE-2010-3636)\n\n -
A memory corruption vulnerability exists in the ActiveX component.
(CVE-2010-3637)\n\n - An unspecified information disclosure vulnerability exists. Note
that this issue only affects Flash Player on Safari. (CVE-2010-3638)\n\n - An unspecified
issue exists which could lead to a denial-of-service or potentially arbitrary code execution.
(CVE-2010-3639)\n\n - Multiple memory corruption issues exists that could lead to
arbitrary code execution. (CVE-2010-3640, CVE-2010-3641, CVE-2010-3642,
CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647,
CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, CVE-2010-3652)\n\n - A
library-loading vulnerability could lead to code execution. (CVE-2010-3639)
Solution: Upgrade to Flash Player 10.1.102.64 / 9.0.289 or later.
CVE-2010-3976
Bugzilla < 3.2.9 / 3.4.9 / 3.6.3 Multiple Vulnerabilities
PVS ID: 5700 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:50599
Description: Synopsis :\n\nThe remote web server is hosting an application that is vulnerable to multiple
attack vectors.\n\nThe remote web server is hosting Bugzilla, a web-based bug tracking
application. For your information, the observed version of Bugzilla is %L.\n\nVersions of
Family Internet Services 1540