(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is : \n %L
.\n\nVersions of Google Chrome earlier than 15.0.874.102 are affected by multiple
vulnerabilities : \n\n - Several URL bar spoofing errors exist related to history handling and
drag-and-drop of URLs. (CVE-2011-28245, CVE-2011-3875)\n\n - Whitespace is stripped
from the end of download filenames. (CVE-2011-3876)\n\n - A cross-site scripting issue
exists related to the appcache internals page. (CVE-2011-3877)\n\n - A race condition
exists related to working process initialization. (CVE-2011-3878)\n\n - An error exists
related to redirection to chrome scheme URIs. (CVE-2011-3879)\n\n - Unspecified special
characters may be used as delimiters in HTTP headers. (CVE-2011-3880)\n\n - Several
cross-origin policy violation issues exist. (CVE-2011-3881)\n\n - Several use-after-free
errors exist related to media buffer handling, counter handling, stale styles, plugins and
editing, and video source handling. (CVE-2011-3882, CVE-2011-3883, CVE-2011-3885,
CVE-2011-3888, CVE-2011-3890)\n\n - Timing issues exist related to DOM traversal.
(CVE-2011-3884)\n\n - An out-of-bounds write error exists in the V8 JavaScript engine.
(CVE-2011-3886)\n\n - Cookie theft is possible via JavaScript URIs. (CVE-2011-3887)\n\n
- A heap overflow issue exists related to Web Audio. (CVE-2011-3889)\n\n - Functions
internal to the V8 JavaScript engine are exposed. (CVE-2011-3891)
Solution: Upgrade to Google Chrome 15.0.874.102 or later.
CVE-2011-3891
Apple iTunes Client Detection
PVS ID: 6051 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is an iTunes client.
Solution: N/A
realtimeonly
CVE Not available
QuickTime < 7.7.1 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6052 FAMILY: Web Clients RISK: HIGH NESSUS ID:56667
Description: Synopsis :\n\nThe remote host contains an application that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of QuickTime is %L.\n\nVersions
of QuickTime earlier than 7.7.1 are potentially affected by multiple vulnerabilities :\n\n - A
buffer overflow exists in the handling of H.264 encoded movie files. (CVE-2011-3219)\n\n
- An uninitialized memory access issue exists in the handling of URL data handlers within
movie file. (CVE-2011-3220)\n\n - An implementation issue exists in the handling of the
atom hierarchy within a movie files. (CVE-2011-3221)\n\n - A cross-site scripting issue
exists int he Save for Web export. (CVE-2011-3218)\n\n - A buffer overflow exists in the
handling of FlashPix files. (CVE-2011-3222)\n\n - A buffer overflow exists in the handling
of FLIC files. (CVE-2011-3223)\n\n - Multiple memory corruption issues exist in the
handling of movie files. (CVE-2011-3228)\n\n - An integer overflow issue exists in the
Family Internet Services 1653