(PVS) Signatures - Tenable Network Security

handling of PICT files. (CVE-2011-3247)\n\n - A signedness issue exists in the handling of
font tables embedded n QuickTime movie files.\n\n - A buffer overflow issue exists in the
handling of FLC encoded movie files. (CVE-2011-3249)\n\n - An integer overflow issue
exists in the handling of JPEG2000 encoded movie files. (CVE-2011-3250)\n\n - A
memory corruption issue exists in the handling of TKHD atoms in QuickTime movie files.
(CVE-2011-3251)
Solution: Upgrade to QuickTime 7.7.1 or later.
CVE-2011-3251
Opera < 11.52 Multiple Vulnerabilities
PVS ID: 6053 FAMILY: Web Clients RISK: HIGH NESSUS ID:56585
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is : \n %L \n\nVersions of Opera earlier than
11.52 are potentially affected by multiple vulnerabilities : \n\n - An error exists in the
handling of certain font manipulations inside dynamically added or specifically embedded
SVG images or SVG content in nested frames. This error can cause the application to crash
and can possibly allow arbitrary code execution. (Issue 1002)\n\n - Several unspecified
error exist that can allow stack overflows leading to browser crashes.
Solution: Upgrade to Opera 11.52 or later.
CVE Not available
Novell iPrint Client < 5.72 Code Execution Vulnerability
PVS ID: 6054 FAMILY: Web Clients RISK: HIGH NESSUS ID:56682
Description: Synopsis :\n\nThe remote host contains an application that is affected by a code execution
vulnerability.\n\nThe remote host has the Novell iPrint client installed. For your
information, the observed version of Novell iPrint Client is : \n %L .\n\nVersions of Novell
iPrint Client earlier than 5.72 are potentially affected by a buffer overflow vulnerability in
the GetDriverSettings method of the nipplib.dll component. A remote, unauthenticated
attacker, exploiting this flaw, could execute arbitrary code on the remote host subject to the
privileges of the user running the affected application.
Solution: Upgrade to Novell iPrint Client 5.72 or later.
GoToMyPC Detection
CVE-2011-3173
PVS ID: 6055 FAMILY: Policy
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 1654