(PVS) Signatures - Tenable Network Security

Description: The remote client is accessing the Cydia software packages. Cydia is an indepented
third-party app distribution platform for Apple iOS. Cydia is mostly use for
Jailbroken devices. The following iOS version was detected:\n %L \n
Solution: Ensure that such usage is in aligment with Corporate policy
CVE Not available
Google Chrome < 22.0.1229.79 Multiple Vulnerabilities
PVS ID: 6592 FAMILY: Web Clients RISK: HIGH NESSUS ID:62313
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by multiple
vulnerabilities.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 22.0.1229.79 are potentially affected by the
following vulnerabilities :\n\n - Out-of-bounds write errors exist related to Skia and the
PDF viewer. (CVE-2012-2874, CVE-2012-2883, CVE-2012-2895)\n\n - Various,
unspecified errors exist related to the PDF viewer. (CVE-2012-2875)\n\n - A buffer
overflow error exists related to 'SSE2' optimizations. (CVE-2012-2876)\n\n - An
unspecified error exists related to extensions and modal dialogs that can allow application
crashes. (CVE-2012-2877)\n\n - Use-after-free errors exist related to plugin handling,
'onclick' handling, 'SVG' text references and the PDF viewer. (CVE-2012-2878,
CVE-2012-2887, CVE-2012-2888, CVE-2012-2890)\n\n - An error exists related to 'DOM'
topology corruption. (CVE-2012-2879)\n\n - Race conditions exist in the plugin paint
buffer. (CVE-2012-2880)\n\n - 'DOM' tree corruption can occur with plugins.
(CVE-2012-2881)\n\n - A pointer error exists related to 'OGG' container handling.
(CVE-2012-2882)- An out-of-bounds read error exists related to Skia.
(CVE-2012-2884)\n\n - The possibility of a double-free error exists related to application
exit. (CVE-2012-2885)\n\n - Universal cross-site scripting issues exist related to the v8
JavaScript engine bindings and frame handling. (CVE-2012-2886, CVE-2012-2889)\n\n -
Address information can be leaked via inter process communication (IPC).
(CVE-2012-2891)\n\n - A bypass error exists related to pop-up block.
(CVE-2012-2892)\n\n - A double-free error exists related to 'XSL' transforms.
(CVE-2012-2893)\n\n - An error exists related to graphics context handling.
(CVE-2012-2894)\n\n - An integer overflow error exists related to 'WebGL'.
(CVE-2012-2896)\nSuccessful exploitation of any of these issues could lead to an
application crash or even allow arbitrary code execution, subject to the user's privileges.
Solution: Upgrade to Google Chrome 22.0.1229.79 or later.
CVE-2012-2896
Foursquare app on an Apple iOS mobile device
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6593 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote Apple iOS mobile device is running the Foursquare app. Foursquare is a free
app used to share and save places you visit.
Solution: Ensure that such usage is in aligment with Corporate policy
Family Internet Services 1805