(PVS) Signatures - Tenable Network Security

Description: The remote host is running an application that is vulnerable to multiple attack
vectors.\n\nThe remote host is running RealPlayer, a multi-media application. For your
information, the observed build of RealPlayer is:\n%L.\n\nRealPlayer builds earlier than
12.0.1.666 are potentially affected by multiple code execution vulnerabilities :\n\n - A heap
based buffer overflow vulnerability exits within qcpfformat.dll file, which only creates a
static 256 byte allocation on the heap. This can be abused by a remote attacker to execute
arbitrary code running in the context of the web browser. (CVE-2011-2950)\n\n - A flaw
exists due to RealPlayer allowing users to run local HTML files with scripting enabled
without any warning. Attackers can exploit this issue to execute arbitrary code within the
context of the application(typically Internet Explorer) that uses the ActiveX control.
(CVE-2011-2947)\n\n - A memory-corruption vulnerability exist due to an use-after-free
condition that affects "Embedded AutoUpdate." Successful exploit will allow remote
attackers to execute arbitrary code within the context of the affected application.
(CVE-2011-2954)\n\n - A remote buffer-overflow vulnerability exists due to the software
failing to perform adequate boundary-checks on user-supplied data. Successful exploit
allow attackers to execute arbitrary code in the context of the vulnerable applications.
(CVE-2011-2951)\n\n - A remote code-execution vulnerability exists when handling
'DEFINEFONT' fields in Flash files. Successful exploit will allow remote attackers to
execute arbitrary code within the context of the affected application. (CVE-2011-2948)\n\n
- A remote code-execution vulnerability exist in the way the application uses
'WideCharToMultiByte' call, resulting in a heap-based buffer overflow. Successful exploit
will allow remote attackers to execute arbitrary code within the context of the affected
application. (CVE-2011-2949)\n\n - A memory-corruption vulnerability exists due to an
use-after-free condition, particularly affects the dialogue box. Successful exploit will allow
remote attackers to execute arbitrary code within the context of the affected application.
(CVE-2011-2952)\n\n\ - A memory-corruption vulnerability exists due to an use-after-free
condition, particularly affects the Embedded Modal Dialog. Successful exploit will allow
remote attackers to execute arbitrary code within the context of the affected application.
(CVE-2011-2955)\n\n - A cross-zone scripting vulnerability exists due to the fact that the
RealPlayer ActiveX control allows users to run local HTML files with scripting enabled
without providing any warning. Attackers can exploit this issue to execute arbitrary code
within the context of the application(typically Internet Explorer) that uses the ActiveX
Control. (CVE-2011-121)\n
Solution: Upgrade to RealPlayer 14.0.6 (Build 12.0.1.666) or later.
CVE-2011-1221
nginx < 1.0.10 DNS Resolver Remote Heap Buffer Overflow
PVS ID: 6456 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis:\n\nThe remote web server is affected by a buffer-overflow vulnerability.\n\nThe
remote host is running a nginx HTTP server. For your information, the observed version of
nginx is:\n %L \n\nVersions earlier than 1.0.10 are vulnerable to a remote heap-based
buffer-overflow vulnerability due to a failure to properly bounds check user-supplied input
to the DNS resolver. The issue occurs specifically when the DNS resolver processes
messages more than 255 bytes. Successfully exploiting this issue allows attackers to
execute arbitrary code in the context of the application. (CVE-2011-4314)\n
Family Internet Services 1762