(PVS) Signatures - Tenable Network Security

Description: The remote host is a 7T Interactive Graphical SCADA System(IGSS) used to control and
monitor programmable logic controllers(PLC) in industrial processes. There was an attempt
to connect to the server listening on IP address: %L.
Solution: Restrict access to the server to authorized personnel only. As well ensure that the product is
up to date on all of its security patches.
CVE Not available
Mozilla Firefox 10.x < 10.0.1 Memory Corruption
PVS ID: 6324 FAMILY: Web Clients RISK: HIGH NESSUS ID:57919
Description: Synopsis :\n\nThe remote host has a web browser installed that is affected by a memory
corruption vulnerability.\n\nFor your information, the observed version of Firefox is : \n
%L \n\nVersions of Firefox 10.x earlier than 10.0.1 are potentially affected by a memory
corruption vulnerability. A use-after-free error exists in the method
'nxXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly
removed from a hash table in the event of failure. Clean up processes may then attempt to
use this data and cause application crashes. These application crashes are potentially
exploitable.
Solution: Upgrade to Firefox 10.0.1 or later.
CVE-2012-0452
Mozilla Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow
PVS ID: 6325 FAMILY: Web Clients RISK: HIGH NESSUS ID:58005
Description: Synopsis :\n\nThe remote host has a web browser installed that is affected by an integer
overflow vulnerability.\n\nFor your information, the observed version of Firefox is : \n %L
\n\nVersions of Firefox 10.x earlier than 10.0.2 are potentially affected by an integer
overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this
application. When decompressing certain PNG image files, this error can allow a
heap-based buffer overflow which can crash the application or potentially allow code
execution.
Solution: Upgrade to Firefox 10.0.2 or later.
CVE-2011-3026
Passive Vulnerability Scanner (PVS) Signatures
Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption
PVS ID: 6326 FAMILY: Web Clients RISK: HIGH NESSUS ID:57920
Description: Synopsis :\n\nThe remote host has a mail client installed that is affected by a memory
corruption vulnerability.\n\nFor your information, the observed version of Thunderbird is :
\n %L \n\nVersions of Thunderbird 10.x earlier than 10.0.1 are potentially affected by a
use-after-free error in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL
bindings are not properly removed from a hash table in the event of failure. Clean up
Family Internet Services 1728