(PVS) Signatures - Tenable Network Security

to audio device handling. (CVE-2012-5108)\n\n - Out-of-bounds read errors exist related to
'ICU' regular expressions and the compositor. (CVE-2012-5109, CVE-2012-5110)\n\n -
The 'Pepper' plugins are missing crash monitoring. (CVE-2012-5111)\n\nSuccessful
exploitation of any of these issues could lead to an application crash or even allow arbitrary
code execution, subject to the user's privileges.
Solution: Upgrade to Google Chrome 22.0.1229.92 or later.
CVE-2012-5111
Google Chrome < 22.0.1229.94 Multiple Vulnerabilities
PVS ID: 6601 FAMILY: Web Clients RISK: HIGH NESSUS ID:62519
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by multiple
vulnerabilities.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 22.0.1229.94 are potentially affected by the
following vulnerabilities :\n\n - A use-after-free error exists related to SVG handling that
can be used to exploit the renderer process.(Issue #154983) \n\n - An unspecified error
exists related to IPC handling that can allow an attacker to escape the application sandbox.
(Issue #154987)\n\nSuccessful exploitation of any of these issues could lead to an
application crash or even allow arbitrary code execution, subject to the user's privileges.
Solution: Upgrade to Google Chrome 22.0.1229.94 or later.
Mozilla Firefox 15.x <
CVE-2012-5112
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6602 FAMILY: Web Clients RISK: HIGH NESSUS ID:62580
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
vulnerabilities.\n\nFor your information, the observed version of Firefox is : \n %L
\n\nVersions of Firefox 15.x are potentially affected by the following security issues :\n\n -
Multiple memory-corruption vulnerabilities in the browser engine that could lead to
arbitrary code execution. (CVE-2012-3982, CVE-2012-3983, CVE-2012-4191)\n\n - A
URI-spoofing vulnerability due to an error when handling the '' dropdown menu.
This issue can be exploited to display arbitrary content while showing the URL of another
site. An attacker can also exploit this issue to cause click jacking attacks. (CVE-2012-3984,
CVE-2012-5354)\n\n - A security-bypass vulnerability exists because it fails to properly
enforce the same-origin policy. Specifically, the error occurs when handling
'document.domain'. An attacker can exploit this issue to execute cross-site scripting attacks.
(CVE-2012-3985)\n\n - Multiple security bypass vulnerabilities exists in the
'nsDOMWindowUtils' methods. (CVE-2012-3986)\n\n - A cross-site scripting vulnerability
exists because it fails to sufficiently sanitize user-supplied input. Specifically, this issue
occurs when transitioning into Reader Mode. Note: This issue affects only Firefox for
Android. CVE-2012-3987)\n\n - A use-after-free issue occurs when invoking full screen
mode and navigating backwards in history. (CVE-2012-3988)\n\n - A denial-of-service
vulnerability that occurs due to invalid cast error. Specifically, this issue occurs when using
the instanceof operator on certain JavaScript objects. (CVE-2012-3989)\n\n - A
Family Internet Services 1808