(PVS) Signatures - Tenable Network Security

The nipplib.dll component, as used by both types of browser plugins, does not properly
handle the profile time parameter from the user specified printer-url before passing it to a
fixed-length buffer on the heap. (ZDI-11-173 / CVE-2011-1700)\n\n - The nipplib.dll
component, as used by both types of browser plugins, does not properly handle the
profile-name parameter from the user specified printer url before passing it to a
fixed-length buffer on the heap. (ZDI-11-174 / CVE-2011-1701)\n\n - The nipplib.dll
component, as used by both types of browser plugins, does not properly handle the
file-date-time parameter from the user specified printer-url before passing it to a
fixed-length buffer on the heap. (ZDI-11-175 / CVE-2011-1702)\n\n - The nipplib.dll
component, as used by both types of browser plugins, does not properly handle the driver
version parameter from the user-specified printer-url before passing it to a fixed-length
buffer on the heap. (ZDI-11-176 / CVE-2011-1703)\n\n - The nipplib.dll component, as
used by both types of browser plugins, does not properly handle the core-package
parameter from the user specified printer-url before passing it to a fixed-length buffer on
the heap. (ZDI-11-177 / CVE_2011-1704)\n\n - The nipplib.dll component, as used by both
types of browser plugins, does not properly handle the client-file-name parameter from the
user specified printer-url before passing it to a fixed-length buffer on the heap.
(ZDI-11-178 / CVE-2011-1705)\n\n - The nipplib.dll component, as used by both types of
browser plugins, does not properly handle the iprint-client-config-info parameter form the
user specified printer-url before passing it to a fixed-length buffer on the heap.
(ZDI-11-179 / CVE-2011-1706)\n\n - The nipplib.dll component, as used by both types of
browser plugins, does not properly handle the op-printer-list-all-jobs parameter from the
user specified printer-url before passing it to a fixed-length buffer on the heap.
(ZDI-11-180 / CVE-2011-1708)\n\n - The nipplib.dll component, as used by both types of
browser plugins, does not properly handle the op-printer-list-all-jobs parameter from the
user specified printer-url before passing it to a fixed-length buffer on the heap.
(ZDI-11-181 / CVE-2011-1707)
Solution: Upgrade to Novell iPrint Client 5.64 or later.
CVE-2011-1708
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 12.0.742.91 Multiple Vulnerabilities
PVS ID: 5943 FAMILY: Web Clients RISK: HIGH NESSUS ID:54989
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by a code execution
vulnerability.\n\nFor your information, the observed version of Google Chrome is
\n%L.\n\nVersions of Google Chrome earlier than 12.0.742.91 are potentially affected by
multiple vulnerabilities :\n\n - A use-after-free issue exists due to integer issues in float
handling. (Issue 73962, 79746)\n\n - A use-after-free issue exists in accessibility support.
(Issue 75496)\n\n - A visit history information leak exists in CSS. (Issue 75643)\n\n - It is
possible to crash the browser with lots of form submissions. (Issue 76034)\n\n - An
extensions permission bypass exists. (Issue 77026)\n\n - A stale pointer exists in the
extension framework. (Issue 78516)\n\n - It is possible to read from an uninitialized
pointer. (Issue 79362)\n\n - It is possible to perform script injection into the new tab page.
(Issue 79862)\n\n - A use-after-free issue exists in developer tools. (Issue 80358)\n\n - A
memory corruption issue exists in history deletion. (Issue 81916)\n\n - A use-after-free
issue exists in the image loader. (Issue 81949)\n\n - It is possible to perform an extension
injection into chrome:// pages. (Issue 83010\n\n - A same origin bypass exists in V8. (Issue
Family Internet Services 1617