(PVS) Signatures - Tenable Network Security

Solution: Upgrade to iTunes 10.2 or later.
CVE-2011-0192
Google Chrome < 9.0.597.107 Multiple Vulnerabilities
PVS ID: 5807 FAMILY: Web Clients RISK: HIGH NESSUS ID:52501
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 9.0.597.107 are potentially affected by
multiple vulnerabilities :\n\n - An unspecified error exists in the URL bar operations which
can allow spoofing attacks. (54262)\n\n - An unspecified error exists in the processing of
JavaScript dialogs. (63732)\n\n - An unspecified error exists in the processing of CSS
nodes which can leave stale pointers in memory. (68263)\n\n - An unspecified error exists
in the processing of key frame rules which can leave stale pointers in memory. (68741)\n\n
- An unspecified error exists in the processing of form controls which can lead to
application crashes. (70078)\n\n - An unspecified error exists in the rendering of SVG
animations and other SVG content which can leave stale pointers in memory. (70244,
71296)\n\n - An unspecified error exists in the processing of tables which can leave stale
nodes behind. (71114)\n\n - An unspecified error exists in the processing of tables which
can leave stale pointers in memory. (71115)\n\n - An unspecified error exists in the
processing of XHTML which can leave stale nodes behind. (71386)\n\n - An unspecified
error exists in the processing of textarea elements which can lead to application crashes.
(71388)\n\n - An unspecified error exists in the processing of device orientation which can
leave stale pointers in memory. (71595)\n\n - An unspecified error exists in WebGL which
allows out-of-bounds memory accesses. (71717, 71960)\n\n - An integer overflow exists in
the processing of textarea elements which can lead to application crashes. (71855)\n\n - A
use-after-free error exists in the processing of blocked plugins. (72437)\n\n - An
unspecified error exists int he processing of layouts which can leave stale pointers in
memory. (73235)
Solution: Upgrade to Google Chrome 9.0.597.107 or later.
CVE-2011-1125
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Firefox 3.6.x < 3.6.14 Multiple Vulnerabilities
PVS ID: 5808 FAMILY: Web Clients RISK: HIGH NESSUS ID:52531
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of Firefox is
:%L.\n\nVersions of Firefox 3.6.x earlier than 3.6.14 are potentially affected by multiple
vulnerabilities :\n\n - Multiple memory corruption issues exists which could lead to
arbitrary code execution. (MFSA 2011-01)\n\n - An error exists in the processing of
recusrive calls to 'eval()' when the call is wrapped in a try/catch statement. This error causes
dialog boxes to be displayed with no content and non-functioning buttons. Closing the
dialog results in default acceptance of the dialog. (MFSA 2011-02)\n\n - A use-after-free
error exists in a method used by 'JSON.stringify' and can allow arbitrary code execution.
(MFSA 2011-03)\n\n - A buffer-overflow vulnerability exists in the JavaScript engine's
internal memory mapping of non-local variables and may lead to cde execution. (MFSA
Family Internet Services 1575