(PVS) Signatures - Tenable Network Security

code execution. (MFSA 2010-74)\n\n - On the Windows platform, when 'document.write()'
is called with a very long string a buffer overflow could be triggered. (MFSA 2010-75)\n\n
- A privilege escalation vulnerability exists with 'window.open' and the '' element.
(MFSA 2010-76)\n\n - Arbitrary code execution is possible when using HTML tags inside
a XUL tree. (MFSA 2010-77)\n\n - Downloadable fonts could expose vulnerabilities in the
underlying OS font code. (MFSA 2010-78)\n\n - A Java security bypass vulnerability when
LiveConnect is loaded via a 'data:' URL meta refresh. (MFSA 2010-79)\n\n - A
use-after-free error exists with nsDOMAttribute MutationObserver. (MFSA 2010-80)\n\n -
An integer overflow exists in NewIdArray. (MFSA 2010-81)\n\n - It is possible to
circumvent the fix for CVE-2010-0179. (MFSA 2010-82)\n\n - It is possible to spoof SSL
in the location bar using the network error page. (MFSA 2010-83)\n\n - A cross-site
scripting hazard exists in multiple character encodings. (MFSA 2010-84)
Solution: Upgrade to SeaMonkey 2.0.11 or later.
CVE-2010-3778
PHP 5.3 < 5.3.4 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5732 FAMILY: Web Servers RISK: HIGH NESSUS ID:51140
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by multiple
vulnerabilities.\n\nAccording to its banner the version of PHP installed on the remote host
is 5.3.x earlier than 5.3.4. Such versions are potentially affected by multiple vulnerabilities
:\n\n - A crash in the zip extract method.\n\n - A stack buffer overflow in impagepstext() of
the GD extension.\n\n - An unspecified vulnerability related to symbolic resolution when
using a DFS share.\n\n - A security bypass vulnerability related to using pathnames
containing NULL bytes. (CVE-2006-7243)\n\n - Multiple format string vulnerabilities.
(CVE-2010-2094, CVE-2010-2950)\n\n - An unspecified security bypass vulnerability in
open_basedir(). (CVE-2010-3436)\n\n - A NULL pointer dereference in
ZipArchive::getArchiveComment. (CVE-2010-3709)\n\n - Memory corruption in
php_filter_validate_email(). (CVE-2010-3710)\n\n - An input validation vulnerability in
xml_utf8_decode(). (CVE-2010-3870)\n\n - A possible double free in the IMAP extension.
(CVE-2010-4150)\n - An information disclosure vulnerability in 'mb_strcut()'.
(CVE-2010-4156)\n\n - An integer overflow vulnerability in 'getSymbol()'.
(CVE-2010-4409)\n\n - A use-after-free vulnerability in the Zend engine when a '__set()',
'__get()', '__isset()' or '__unset()' method is called can allow for a denial of service attack.
(Bug #52879 / CVE-2010-4697)\n\n - A stack-based buffer overflow exists in the
'imagepstext()' function in the GD extension. (Bug #53492 / CVE-2010-4698)\n\n - The
'iconv_mime_decode_headers()' function in the iconv extension fails to properly handle
encodings that are not recognized by the iconv and mbstring implementations. (Bug #52941
/ CVE-2010-4699)\n\n - The 'set_magic_quotes_runtime()' function when the MySQLi
extension is used does not properly interact with the 'mysqli_fetch_assoc()' function. (Bug
#52221 / CVE-2010-4700)\n\n - A race condition exists in the PCNTL extension.
(CVE-2011-0753)\n\n - The SplFileInfo::getType function in the Standard PHP Library
extension does not properly detect symbolic links. (CVE-2011-0754)\n\n - An integer
overflow exists in the mt_rand function. (CVE-2011-0755)
Solution: Upgrade to PHP version 5.3.4 or later.
Family Internet Services 1552