(PVS) Signatures - Tenable Network Security

for several prominent public websites.\n\nIf an attacker can trick someone into using the
affected browser and visiting a malicious site using one of the fraudulent certificates, he
may be able to fool that user into believing the site is a legitimate one. In turn, the user
could send credentials to the malicious site or download and install applications.
Solution: Upgrade to SeaMonkey 2.0.13 or later.
CVE Not available
Google Chrome < 10.0.648.204 Multiple Vulnerabilities
PVS ID: 5845 FAMILY: Web Clients RISK: HIGH NESSUS ID:52975
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by a code execution
vulnerability.\n\nFor your information, the observed version of Google Chrome is
%L.\n\nVersions of Google Chrome earlier than 10.0.648.204 are potentially affected by
multiple vulnerabilities :\n\n - A buffer error exists in string handling functions.
(72517)\n\n - A use-after-free error exists in the process for loading frames. (73216)\n\n - A
use-after-free error exists in the processing of HTML Collections. (73595)\n\n - An error
exists in the processing of CSS which leaves stale pointers behind. (74562)\n\n - An
unspecified error allows DOM tree corruption related to broken node-hierarchy.
(74991)\n\n - An error exists in the processing of SVG text which leaves stale pointers
behind. (75170)
Solution: Upgrade to Google Chrome 10.0.648.204 or later.
CVE-2011-1296
VLC Media Player < 1.1.8 Multiple Buffer Overflows
PVS ID: 5846 FAMILY: Web Clients RISK: HIGH NESSUS ID:52976
Description: Synopsis :\n\nThe remote host contains an application that allows arbitrary code
execution.\n\nThe remote host contains VLC player, a multi-media application. For your
information, the observed version of VLC is %L.\n\nVersions of VLC media player earlier
than 1.1.8 are potentially affected by buffer overflow vulnerabilities when handling
specially crafted AMV and NSV files, which could result in arbitrary code execution.
Solution: Upgrade to VLC Media Player version 1.1.8 or later.
CVE-2010-3276
Generic Credit Card Signature Detection
PVS ID: 5847 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: Generic credit card sigs
Solution: N/A
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1588