(PVS) Signatures - Tenable Network Security

style elements in TeXML files. (CVE-2012-3752)\n\n - A buffer overflow exists in the
handling of MIME types. (CVE-2012-3753)\n\n - A use-after-free issue exists in the
QuickTime ActiveX control's handling of the 'Clear()' method. (CVE-2012-3754)\n\n - A
buffer overflow exists in the handling of Targa image files. (CVE-2012-3755)\n\n - A
buffer overflow exists in the handling of 'rnet' boxes in MP4 files.
(CVE-2012-3756)\nSuccessful exploitation of these issues could result in program
termination or arbitrary code execution, subject to the user's privileges.
Solution: Upgrade to QuickTime 7.7.3 or later.
CVE-2012-3758
Opera < 12.11 Multiple Vulnerabilities
PVS ID: 6621 FAMILY: Web Clients RISK: HIGH NESSUS ID:62984
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable by multiple
vulnerabilities.\n\nThe remote host is running the Opera web browser. For your
information, the observed version of Opera is : \n %L \n\nVersions of Opera earlier than
12.11 are potentially affected by the following vulnerabilities :\n\n - A heap-based buffer
overflow error exists related to handling HTTP responses that can lead to application
crashes or arbitrary code execution. (1036)\n\n - An issue exists related to the application's
error handling that can allow a malicious website to determine the existence of and path to
local files. (1037)
Solution: Upgrade to Opera 12.11 or later.
CVE Not available
Mac OS X : Safari < 6.0.2 Multiple Vulnerabilities
PVS ID: 6622 FAMILY: Web Clients RISK: HIGH NESSUS ID:62802
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by several
vulnerabilities.\n\nThe remote Mac OS X host has Safari installed. For your information,
the observed version of Safari is: \n %L \n\nVersions of Safari earlier than 6.0.2 are
reportedly affected by several issues :\n\n - A time-of-check-to-time-of-use issue in the
handling of JavaScript array in WebKit could lead to arbitrary, remote code execution.
(CVE-2012-3748)\n\n - A use-after-free issue in the handling of SVG images in WebKit
code could lead to arbitrary, remote code execution. (CVE-2012-5112)
Solution: Upgrade to Safari 6.0.2 or later.
CVE-2012-5112
Apache Tomcat 7.0.x < 7.0.28 Header Parsing Remote Denial of Service
PVS ID: 6623 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:62985
Family Internet Services 1817