(PVS) Signatures - Tenable Network Security

decoding. (CVE-2013-0894)\n\n - Memory management errors exist related to plugin
message handling. (CVE-2013-0896)\n\n - An off-by-one read error exists related to PDF
handling. (CVE-2013-0897)\n\nNote that the vendor states that WebKit's MathML
implementation has been disabled in this release. This is due to several unspecified, high
severity security issues. Successful exploitation of some of these issues could lead to an
application crash or even allow arbitrary code execution, subject to the user's privileges.
Solution: Upgrade to Google Chrome 25.0.1364.97 or later.
mDNS Client Queries
CVE-2013-2268
PVS ID: 6695 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote client has issued a response query for the following resource name.
Solution: N/A
realtimeonly
CVE Not available
MAC change detection (SNMP)
PVS ID: 6696 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote client has just issued a trap which indicates a change of MAC Address
realtimeonly
Solution: Solution Not Available
CVE Not available
Ecava IntegraXor < 4.00.4283 ActiveX Remote Buffer Overflow (SCADA)
PVS ID: 6697 FAMILY: SCADA RISK: HIGH NESSUS ID:64630
Description: Synopsis :\n\nThe remote Windows host contains a SCADA application that is affected by
a buffer overflow vulnerability.\n\nFor you information, the observed version of the server
is : \n %L \n\nThe IntegraXor server installed on the remote host is earlier than 4.00 Build
4283. As such, it is reportedly affected by a buffer overflow vulnerability in the ActiveX
file 'PE3DO32A.ocx'. If an attacker can trick a user on the affected host into visiting a
specially crafted web page, they may be able to leverage this issue to conduct a denial of
service (DoS) or execute arbitrary code on the host subject to user's privileges.
Solution: Upgrade to version 4.00.4283 or later
CVE-2012-4700
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1844