(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 16.0.912.77 are potentially affected by
multiple vulnerabilities :\n\n - Use-after-free errors exist related to DOM selections, DOM
handling, and Safe Browsing functionality. (CVE-2011-3924, CVE-2011-3925,
CVE-2011-3928)\n\n - A heap-based buffer overflow exists in the 'tree builder'.
(CVE-2011-3926)\n\n - An error exists related to an uninitialized value in 'Skia'.
(CVE-2011-3927)
Solution: Upgrade to Google Chrome 16.0.912.77 or later.
CVE-2011-3928
Opera < 11.61 Multiple Vulnerabilities
PVS ID: 6295 FAMILY: Web Clients RISK: HIGH NESSUS ID:57751
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is : \n %L \n\nVersions of Opera earlier than
11.61 are potentially affected by multiple vulnerabilities :\n\n - It is possible to manipulate
framed content in a way that allows cross-site scripting. (Issue 1007)\n\n - Script events can
be used to reveal the presence of local files. (Issue 1008)
Solution: Upgrade to Opera 11.61 or later.
CVE Not available
CentOS Version Detection
PVS ID: 6296 FAMILY: Operating System Detection RISK: INFO NESSUS ID:Not Available
Description: The remote host is running CentOS version: %L.
Solution: Ensure that host is up to date on security updates and in accordance to company policy.
CVE Not available
Android 2.3 < 2.3.6 Information Disclosure
PVS ID: 6297 FAMILY: Mobile Devices
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is affected by an information disclosure
vulnerability.\n\nFor your information, the observed version of Android OS installed on the
remote device is : \n %L \n\nVersions of Android OS earlier than 2.3.6 are potentially
affected by an information disclosure vulnerability. The bluetooth stack used by Android
2.3 allows a physically proximate attacker to obtain contact information from a target
device via AT phonebook transfer.
Family Internet Services 1718