(PVS) Signatures - Tenable Network Security

Solution: Upgrade to SeaMonkey 2.7.0 or later.
CVE-2012-0450
Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities
PVS ID: 6311 FAMILY: Web Clients RISK: HIGH NESSUS ID:57863
Description: Synopsis :\n\nThe remote host is running an application that is vulnerable to multiple attack
vectors.\n\nThe remote host is running RealPlayer, a multi-media application. For your
information, the observed build of RealPlayer is :\n %L \n\nRealPlayer versions earlier than
15.0.2.72 are potentially affected by the following issues :\n\n - A remote code execution
vulnerability exists related to rvrender RMFF Flags. (CVE-2012-0922)\n\n - A remote code
execution vulnerability exists related to the RV20 Frame Size Array. (CVE-2012-0923)\n\n
- A remote code execution vulnerability exists relating to VIDOBJ_START_CODE.
(CVE-2012-0924)\n\n - A remote code execution vulnerability exists relating to RV40.
(CVE-2012-0925)\n\n - A remote code execution vulnerability exists relating to RV10
Encoded Height/Width. (CVE-2012-0926)\n\n - A remote code execution vulnerability
exists relating to RealAudio coded_frame_size. (CVE-2012-0927)\n\n - A remote code
execution vulnerability exists relating to Attrac Sample Decoding. (CVE-2012-0928)
Solution: Upgrade to RealPlayer 15.0.2.72 or later.
CVE-2012-0928
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 17.0.963.46 Multiple Vulnerabilities
PVS ID: 6312 FAMILY: Web Clients RISK: HIGH NESSUS ID:57876
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 17.0.963.46 are potentially affected by the
following vulnerabilities :\n\n - Clipboard monitoring after a paste action is possible.
(CVE-2011-3953)\n\n - Application crashes are possible with excessive database usage,
killing an 'IndexDB' transaction, signature checks and processing unusual certificates.
(CVE-2011-3954, CVE-2011-3955, CVE-2011-3965, CVE-2011-3967)\n\n - Sandboxed
origins are not handled properly inside extensions. (CVE-2011-3956)\n\n - Use-after-free
errors exist related to PDF garbage collection, stylesheet error handling, CSS handling,
SVG layout and 'mousemove' event handling. (CVE-2011-3957, CVE-2011-3966,
CVE-2011-3968, CVE-2011-3969, CVE-2011-3971)\n\n - An error exists related to bad
casting and column spans. (CVE-2011-3958)\n\n - A buffer overflow exists related to
locale handling. (CVE-2011-3959)\n\n - Out-of-bounds read errors exist related to audio
decoding, path clipping, PDF fax imaging, 'libxslt', and the shader translator.
(CVE-2011-3960, CVE-2011-3962, CVE-2011-3963, CVE-2011-3970,
CVE-2011-3972)\n\n - A race condition exists after a utility process crashes.
(CVE-2011-3961)\n\n - An unspecified error exists related to the URL bar after drag and
drop operations. (CVE-2011-3964)
Solution: Upgrade to Google Chrome 17.0.963.46 or later.
Family Internet Services 1724