(PVS) Signatures - Tenable Network Security

PVS ID: 6339 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Evernote client. Evernote is an application which allows
users to sync files across multiple devices, interact with social media sites, and do a host of
other things.
Solution: Ensure that such usage is in alignment with Corporate policy
CVE Not available
IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities
PVS ID: 6340 FAMILY: Database RISK: HIGH NESSUS ID:58105
Description: Synopsis :\n\nThe remote database server is vulnerable to a denial of service attack.\n\nThe
remote host is running IBM solidDB. For your information, the observed version of
solidDB is:\n %L \n\nVersions of solidDB 6.5 earlier than 6.5.0.8 are potentially affected
by multiple denial of service vulnerabilities :\n\n - Sending packets with many integer
fields can trigger several recursive calls of a certain function causing an excessive amount
of stack memory consumption. (CVE-2010-4055, IC80074)\n\n - Upon receiving a packet
containing only a single integer field, a NULL pointer dereference can occur causing a
daemon crash. (CVE-2010-4056, IC80075)\n\n - When receiving a packet with many
different integer fields containing two different values, an invalid memory access and
daemon crash can occur. (CVE-2010-4057, IC80076)
Solution: Upgrade to solidDB 6.5.0.8 or later.
CVE-2010-4057
Google Chrome < 17.0.963.65 Multiple Vulnerabilities
PVS ID: 6341 FAMILY: Web Clients RISK: HIGH NESSUS ID:58206
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 17.0.963.65 are potentially affected by the
following vulnerabilities :\n\n - Use-after-free errors exist related to 'v8 element wrapper',
SVG value handling, SVG document handling, SVG use handling, multi-column handling,
quote handling, class attribute handling, table section handling, flexbox with floats and
SVG animation elements. (CVE-2011-3031, CVE-2011-3032, CVE-2011-3034,
CVE-2011-3035, CVE-2011-3038, CVE-2011-3039, CVE-2011-3041, CVE-2011-3042,
CVE-2011-3043, CVE-2011-3044)\n\n - An error exists in the 'Skia' drawing library that
can allow buffer overflows. (CVE-2011-3033)\n\n - Casting errors exist related to line box
handling and anonymous block splitting. (CVE-2011-3036, CVE-2011-3037)\n\n - An
out-of-bounds read error exists related to text handling. (CVE-2011-3040)
Solution: Upgrade to Google Chrome 17.0.963.65 or later.
CVE-2011-3044
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1733