(PVS) Signatures - Tenable Network Security

Mozilla SeaMonkey 2.x < 2.3.0 Multiple Vulnerabilities
PVS ID: 6012 FAMILY: Web Clients RISK: HIGH NESSUS ID:55885
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of SeaMonkey is : \n %L
\n\nVersions of SeaMonkey earlier than 2.3.0 are potentially affected by multiple
vulnerabilities : \n\n - An error in SVG text manipulation code createes a dangling pointer
vulnerability. (CVE-2011-0084)\n\n - Multiple unspecified memory safety issues exist.
(CVE-2011-2985)\n\n - An errir in the D2D hardware acceleration code can allow image
data from one domain to be read by another domain. (CVE-2011-2986)\n\n - An error in
the ANGLE library used by the WebGL implementation can allow heap overflows,
possibly leading to code execution. (CVE-2011-2987)\n\n - An error in the shader program
handling code can allow a large shader program to overflow a buffer and crash.
(CVE-2011-2988)\n\n - An unspecified error exists related to WebGL.
(CVE-2011-2989)\n\n - Two errors exist related to Content Security Policy and can lead to
information disclosure. (CVE-2011-2990)\n\n - An unspecified error exists that can allow
JavaScript crashes. (CVE-2011-2991)\n\n - An unspecified error exists that can allow the
Ogg reader to crash. (CVE-2011-2992)\n\n - An unspecified error exists that can allow
unsigned JavaScript to call into a signed JAR and inherit the signed JAR's permissions and
identity. (CVE-2011-2993)
Solution: Upgrade to SeaMonkey 2.3.0 or later.
DHCP Client Detection
CVE-2011-2993
PVS ID: 6013 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: A DHCP client is running on this host.
Solution: N/A
realtimeonly
mDNS Client Queries
CVE Not available
PVS ID: 6014 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote client has issued a name query for the following resource name.
Solution: N/A
realtimeonly
CVE Not available
PHP 5.3 < 5.3.7 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1640