(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is running a gaming console.\n\nThe remote host is running
the Steam Valve Client. Steam Valve is an entertainment platform used for gaming, chat,
and more. The remote version is %L
Solution: Ensure that such usage is authorized with respect to existing policies and guidelines
CVE Not available
Opera < 12.10 Multiple Vulnerabilities
PVS ID: 6618 FAMILY: Web Clients RISK: HIGH NESSUS ID:62821
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable by multiple
vulnerabilities.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is : \n %L \n\nVersions of Opera earlier than
12.10 are potentially affected by the following vulnerabilities :\n\n - An error exists related
to certificate revocation checking that can allow the application to indicate that a site is
secure even though the check has not completed. (1029)\n\n - An error exists related to
Cross-Origin Resource Sharing (CORS) handling that can allow specially crafted requests
to aid in disclosing sensitive data. (1030)\n\n - An error exists related to data URIs that
allows bypassing of the 'Same Origin Policy' and cross-site scripting attacks. (1031)\n\n -
An error exists related to SVG image handling that can result in arbitrary code execution.
(1033)\n\n - Two unspecified errors exist having unspecified impact.
Solution: Upgrade to Opera 12.10 or later.
2012-6467
Microsoft Office365 Access
PVS ID: 6619 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote client has initiated an SSL session to the Microsoft office365 portal
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
PVS ID: 6620 FAMILY: Web Clients RISK: HIGH NESSUS ID:62890
Description: Synopsis :\n\nThe remote host contains an application that is vulnerable to multiple attack
vectors.\n\nFor your information, the observed version of QuickTime is %L.\n\nVersions
of QuickTime earlier thanolder than 7.7.3 are affected by the following vulnerabilities :\n\n
- A buffer overflow exists in the handling of REGION records in PICT files.
(CVE-2011-1374)\n\n - A memory corruption issue exists in the handling of PICT files.
(CVE-2012-3757)\n\n - A use-after-free issue exists in the QuickTime plugin's handling of
'_qtactivex_' parameters within an HTML object element. (CVE-2012-3751)\n\n - A buffer
overflow exists in the handling of the transform attribute in text3GTrack elements in
TeXML files. (CVE-2012-3758)\n\n - Multiple buffer overflows exist in the handling of
Family Internet Services 1816