Versions of OpenOffice earlier than 3.3 are potentially affected by several issues :

  - Issues exist relating to PowerPoint document parsing that may lead to arbitrary code execution. (CVE-2010-2935, CVE-2010-2936)

  - A directory traversal vulnerability exists in zip / jar package extraction. (CVE-2010-3450)

  - Issues exist relating to RTF document processing that may lead to arbitrary code execution. (CVE-2010-3451, CVE-2010-3452)

  - Issues exist relating to Word document processing that may lead to arbitrary code execution. (CVE-2010-3453, CVE-2010-3454)

  - The OpenOffice.org start script and other shell scripts expand the LD_LIBRARY_PATH in a way that the current directory might be searched for libraries before /lib and /usr/lib. (CVE-2010-3689)

  - Issues exist in the third party XPDF library relating to PDf processing that may allow arbitrary code execution. (CVE-2010-3702, CVE-2010-3704)

  - OpenOffice.org includes a version of LIBXML2 that is affected by multiple vulnerabilities. (CVE-2010-4008, CVE-2010-4494)

  - An issue exists with PNG file processing that may allow arbitrary code execution. (CVE-2010-4253)

  - An issue exists with TGA file processing that may allow arbitrary code execution. (CVE-2010-4643)

The remote host has iTunes installed, a popular media player for Windows and Mac OS.

Versions of iTunes earlier than 10.2 are potentially affected by numerous issues in the following components :

  - ImageIO

  - libxml

  - WebKit

Note that these issues only affect iTunes on Windows.

Versions of Mac OS X 10.6 earlier than 10.6.7 are potentially affected by a security issue.  Mac OS X 10.6.7 contains a security fix for the following products :

  - Airport

  - Apache

  - AppleScript

  - ATS

  - bzip2

  - CarbonCore

  - ClamAV

  - CoreText

  - HFS

  - ImageIO

  - Image RAW

  - Installer

  - Kerberos

  - Kernel

  - Libinfo

  - libxml

  - Mailman

  - PHP

  - QuickLook

  - QuickTime

  - Ruby

  - Samba

  - Subversion

  - Terminal

  - X11

Versions of Google Chrome earlier than 8.0.552.215 are potentially affected by multiple vulnerabilities :

  - It may be possible to bypass the pop-up blocker. (17655)

  - A cross-origin video theft vulnerability exists related to canvas. (55747)  - An unspecified crash exists when handling HTML5 databases. (56237)  - Excessive file dialogs could lead to a browser crash. (58329)  - A use after free error exists in history handling. (59554)  - It may be possible to crash the browser when performing http proxy authentication. (61701)  -  An out-of-bounds read regression exists in the WebM video support. (61653)

  - It  may be possible to crash the browser due to bad indexing with malformed video. (62127)

  - A memory corruption issue exists relating t malicious privileged extension. (62168)

  - A use-after-free error exists in the mouse dragging event handling. (63051)

  - A double free error exists in XPath handling. (63444)

Versions of Mac OS X 10.6 earlier than 10.6.7 are potentially affected by a security issue.  Mac OS X 10.6.7 contains a security fix for the following products :

  - Airport

  - Apache

  - AppleScript

  - ATS

  - bzip2

  - CarbonCore

  - ClamAV

  - CoreText

  - HFS

  - ImageIO

  - Image RAW

  - Installer

  - Kerberos

  - Kernel

  - Libinfo

  - libxml

  - Mailman

  - PHP

  - QuickLook

  - QuickTime

  - Ruby

  - Samba

  - Subversion

  - Terminal

  - X11
IAVB Reference : 2010-B-0083
STIG Finding Severity : Category II

The remote host has Safari installed.

Versions of Safari earlier than 5.0.4 are potentially affected by several issues in the following component :

  - ImageIO

  - libxml

  - WebKit

ID	名前	製品	ファミリー	公開日	更新日	深刻度
5745	OpenOffice < 3.3 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2011/1/27	2019/3/6	high
5806	iTunes < 10.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2011/3/3	2019/3/6	high
5826	Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2011/3/21	2019/3/6	critical
800959	Google Chrome < 8.0.552.215 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2010/12/6		high
800796	Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	2011/3/21		high
801013	Safari < 5.0.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2011/3/10		high

検出

プラグインの検索

high

high

critical

high

high

high