(PVS) Signatures - Tenable Network Security

statically-sized arrays on the heap, which could allow for arbitrary code execution.
(CVE-2011-0021)\n\n - A heap-based memory corruption vulnerability exists i the
StripTags function in the USF decoder. (CVE-20111-0522)
Solution: Upgrade to VLC Media Player version 1.1.6 or later.
CVE-2011-0522
Opera < 11.01 Multiple Vulnerabilities
PVS ID: 5747 FAMILY: Web Clients RISK: HIGH NESSUS ID:51774
Description: Synopsis :\n\nThe remote host has a web browser that is vulnerable to multiple attack
vectors.\n\nThe remote host is running the Opera web browser. For your information, the
observed version of Opera is %L.\n\nVersions of Opera earlier than 11.01 are potentially
affected by multiple vulnerabilities :\n\n - When certain large form inputs appear on a web
page, they can lead to memory corruption which could be used to execute arbitrary code.
(982)\n\n - It is possible to bypass restrictions on 'opera:' URLs to launch clickjacking
attacks. (983)\n\n - Certain types of HTTP responses and redirections can cause Opera to
mistakenly give elevated privileges to remote web pages. (984)\n\n - When using 'Delete
Private Data' and selecting the option to 'Clear all email account passwords', the passwords
are not deleted immediately and continue to be available until the browser is restarted.
(986)\n\n - In certain cases, the wrong executable is used to display a downloaded file in its
folder. (985)
Solution: Upgrade to Opera 11.01 or later.
CVE-2011-0687
Real Networks RealPlayer < 14.0.2.633 (Build 12.0.1.633) Multiple Remote Code Execution
Vulnerabilities
PVS ID: 5748 FAMILY: Web Clients RISK: HIGH NESSUS ID:51814
Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple attack
vectors.\n\nThe remote host is running RealPlayer, a multi-media application. For your
information, the observed build of RealPlayer is %L.\n\nRealPlayer builds earlier than
12.0.1.633 are potentially affected by multiple code execution vulnerabilities : - A heap
corruption vulnerability when handling specially crafted AVI headers.
(CVE-2010-4393)\n\n - A flaw exists in the temporary file naming scheme used for storage
which can be combined with the OpenURLinPlayerBrowser function to execute arbitrary
code. (CVE-2011-0694)
Solution: Upgrade to RealPlayer 14.0.2.633 (Build 12.0.1.633) or later.
CVE-2011-0694
DB2 9.1 < Fix Pack 10 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5749 FAMILY: Database RISK: HIGH NESSUS ID:51840
Family Internet Services 1558