(PVS) Signatures - Tenable Network Security

SeaMonkey < 2.16 Multiple Vulnerabilities
PVS ID: 6693 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nFor your information, the observed version of SeaMonkey is
%L.\n\nVersions of SeaMonkey earlier than 2.16 are potentially affected by multiple
vulnerabilities :\n\n - Numerous memory safety errors exist. (CVE-2013-0783,
CVE-2013-0784)\n\n - An out-of-bounds read error exists related to the handling of GIF
images. (CVE-2013-0772)\n\n - An error exists related to 'WebIDL' object wrapping that
has an unspecified impact. (CVE-2013-0765)\n\n - An error exists related to Chrome
Object Wrappers (COW) or System Only Wrappers (SOW) that could allow security
bypass. (CVE-2013-0773)\n\n - The file system location of the active browser profile could
be disclosed and used in further attacks. (CVE-2013-0774)\n\n - A use-after-free error
exists in the function 'nsImageLoadingContent'. (CVE-2013-0775)\n\n - Spoofing HTTPS
URLs is possible due to an error related to proxy '407' responses and embedded script code.
(CVE-2013-0776)\n\n - A heap-based use-after-free error exists in the function
'nsDisplayBoxShadowOuter::Paint'. (CVE-2013-0777)\n\n - An out-of-bounds read error
exists in the function 'ClusterIterator::NextCluster'. (CVE-2013-0778)\n\n - An
out-of-bounds read error exists in the function 'nsCodingStateMachine::NextState'.
(CVE-2013-0779)\n\n - A heap-based use-after-free error exists in the function
'nsOverflowContinuationTracker::Finish'. (CVE-2013-0780)\n\n - A heap-based
use-after-free error exists in the function 'nsPrintEngine::CommonPrint'.
(CVE-2013-0781)\n\n - A heap-based buffer overflow error exists in the function
'nsSaveAsCharset::DoCharsetConversion'. (CVE-2013-0782)
Solution: Upgrade to Mozilla SeaMonkey 2.16 or later.
CVE-2013-0784
Passive Vulnerability Scanner (PVS) Signatures
Google Chrome < 25.0.1364.97 Multiple Vulnerabilities
PVS ID: 6694 FAMILY: Web Clients RISK: HIGH NESSUS ID:64813
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by multiple
vulnerabilities.\n\nFor your information, the observed version of Google Chrome is :\n %L
\n\nVersions of Google Chrome earlier than 25.0.1364.97 are potentially affected by the
following vulnerabilities :\n\n - An unspecified memory corruption error exists related to
'web audio node'. (CVE-2013-0879)\n\n - Use-after-free errors exist related to database and
URL handling. (CVE-2013-0880, CVE-2013-0898)\n\n - Improper memory read errors
exist related to Matroska, excessive SVG parameters, and Skia. (CVE-2013-0881,
CVE-2013-0882, CVE-2013-0883, CVE-2013-0888)\n\n - An error exists related to
improper loading of 'NaCl'. (CVE-2013-0884)\n\n - The 'web store' is granted too many
API permissions. (CVE-2013-0885)\n\n - The developer tools process is granted too many
permissions and trusts remote servers incorrectly. (CVE-2013-0887)\n\n - User gestures are
not properly checked with respect to dangerous file downloads. (CVE-2013-0889)\n\n - An
unspecified memory safety issue exists in the IPC layer. (CVE-2013-0890)\n\n - Integer
overflow errors exist related to blob and 'Opus' handling. (CVE-2013-0891,
CVE-2013-0899)\n\n - Numerous, unspecified, lower-severity issues exist related to the
IPC layer. (CVE-2013-0892)\n\n - Race conditions exist related to media handling and
ICU. (CVE-2013-0893, CVE-2013-0900)\n\n - A buffer overflow exists related to vorbis
Family Internet Services 1843