(PVS) Signatures - Tenable Network Security

memory corruption vulnerability in the RealAudio codec. (CVE-2010-4387)\n\n - A
cross-zone scripting vulnerability in the ActiveX HandleAction Method.
(CVE-2010-4396)\n\n - A cross domain scripting vulnerability is exploitable via local
HTML files. (CVE-2010-4388)\n\n - A heap overflow vulnerability exists in the Cook
codec initialization buffer index.(CVE-2010-4389)\n\n - A heap overflow vulnerability
exists in the IVR file header. (CVE-2010-4390)\n\n - A heap overflow vulnerability exists
in the RMX header. (CVE-2010-4391)\n\n - A heap overflow vulnerability exists in
ImageMap. (CVE-2010-4392)\n\n - A heap overflow vulnerability exists in RealPix server
header. (CVE-2010-4394)\n\n - A heap overflow exists in the Advanced audio coding.
(CVE-2010-4395)
Solution: Upgrade to RealPlayer 14.0.1.609 (Build 12.0.1.609) or later.
CVE-2010-4397
VLC Media Player < 1.1.5 Samba Share Access Module Code Execution
PVS ID: 5710 FAMILY: Web Clients RISK: HIGH NESSUS ID:50650
Description: Synopsis :\n\nThe remote host contains an application that allows arbitrary code
execution.\n\nThe remote host contains VLC player, a multi-media application. For your
information, the observed version of VLC is %L.\n\nVersions of VLC media player earlier
than 1.1.5 are potentially affected by a code execution vulnerability. Due to an error in the
declaration of code calling conventions, VLC suffers from a stack smashing attack in the
Samba network share access module which could lead to arbitrary code execution. Note
that this issue only affects VLC for Windows.
Solution: Upgrade to VLC Media Player version 1.1.5 or later.
CVE Not available
Safari < 4.1.3 / 5.0.3 Multiple Vulnerabilities
PVS ID: 5711 FAMILY: Web Clients RISK: HIGH NESSUS ID:50654
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Safari is %L.\n\nThe remote host
has Safari installed. For your information, the observed version of Safari is
%L.\n\nVersions of Safari earlier than 4.1.3 / 5.0.3 are potentially affected by several issues
in the following component :\n\n - Safari\n\n - Webkit
Solution: Upgrade to Safari 4.1.3, 5.0.3, or later.
CVE-2010-3826
Serv-U < 10.3.0.1 SFTP Server Authentication Bypass Vulnerability
PVS ID: 5712 FAMILY: SSH
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:50659
Family Internet Services 1544