(PVS) Signatures - Tenable Network Security

code on the remote host. The version of Firefox is vulnerable to multiple denial of service
attacks, overflows, information disclosure, privilege escalation, and other issues. An
attacker exploiting these flaws would need to be able to convince a Firefox user to browse
to a malicious URI.
Solution: Upgrade to version 1.5.0.2, 1.0.8 or higher.
CVE-2006-1730
Mozilla Thunderbird < 1.5.0.2 or 1.0.8 Multiple Vulnerabilities
PVS ID: 3513 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running a vulnerable version of Mozilla Thunderbird mail client. This
version of Thunderbird is vulnerable to multiple denial of service attacks, overflows,
information disclosure, privilege escalation, and other issues. An attacker exploiting these
flaws would need to be able to convince a user to open or read a malicious email.
Successful exploitation would give the attacker the ability to execute arbitrary code with
the permissions of the user running Thunderbird.
Solution: Install version 1.5.0.2, 1.0.8 or higher.
CVE-2006-1730
Mozilla Browser < 1.7.13 Multiple Vulnerabilities
PVS ID: 3514 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using Mozilla. The installed version of Mozilla contains various security
issues, several of which are critical as they can be easily exploited to execute arbitrary shell
code on the remote host. The version of Mozilla is vulnerable to multiple denial of service
attacks, overflows, information disclosure, privilege escalation, and other issues. An
attacker exploiting these flaws would need to be able to convince a Mozilla user to browse
to a malicious URI.
Solution: Upgrade to version 1.7.13 or higher.
CVE-2006-1730
Opera < 8.54 signedness StyleSheet Overflow
PVS ID: 3515 FAMILY: Web Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:21221
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to a buffer
overflow vulnerability.\n\nThe remote host is using Opera. The version of Opera installed
on the remote host contains a buffer overflow that can be triggered by a long value within a
stylesheet attribute. Successful exploitation can lead to a browser crash and possibly allow
for the execution of arbitrary code subject to the privileges of the user running Opera.
Family Internet Services 906