Apple iTunes < 9.2.1 'itpc:' Buffer Overflow (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs that could allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an...

Cerberus FTP Server MLSD and MLST Command Hidden Files Security Bypass

The version of Cerberus FTP server on the remote host is earlier than 4.0.3.0. Such versions are potentially affected by a security bypass vulnerability. The 'MLSD' and 'MLST' commands list hidden files despite the 'Display hidden files' option being disabled. A remote attacker, possibly...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

HP MFP Digital Sending Software Detection

The remote Windows host contains HP MFP Digital Sending Software, an application that enables an HP Multifunction Peripheral MFP to send scanned documents directly to several types of destinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46675;...

HP Virtual Machine Manager Detection

HP Virtual Machine Manager VMM is installed on the remote host. VMM provides centralized management for multiple virtualization platforms. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46238; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS

The remote Windows host contains a version of Alt-N MDaemon that is earlier than 11.0.1. As such, it is prone to multiple remote denial of service attacks. An attacker may exploit these issues to deny the application's services to legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP Operations Manager SourceView ActiveX LoadFile / SaveFile Stack Overflows

The SourceView ActiveX control, a component of HP Operations Manager, installed on the remote Windows host reportedly is affected by buffer overflows that can be triggered by passing specially crafted Unicode strings to the 'LoadFile' or 'SaveFile' methods. If an attacker can trick a user on the...

Computer Associates XOsoft Multiple Flaws (CA20100406) (credentialed check)

XOsoft, a product from Computer Associates for combined business continuity and disaster recovery, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities. - By sending a specially crafted SOAP request, it may be possible for an unauthenticated...

Zeus/Zbot Banking Trojan/Data Theft (credentialed check)

The remote Windows host has files that indicate that the Zeus also known as Zbot banking trojan has been installed, or that stolen data collected by this trojan remains on the system. The Zeus trojan will intercept and log activity related to online banking, as well as other logins, such as web,...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (credentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Safari < 4.0.5 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.5. It thus is potentially affected by several issues : - A buffer underflow in ImageIO's handling of TIFF images could lead to a crash or arbitrary code execution. CVE-2009-2285 - An integer overflow in the handling of...

CSS Web Installer CSSWEBLib.Installer ActiveX InstallProduct1 Method Overflow

The CSS Web Installer ActiveX control, a component of the Authentium Command On Demand virus scanner, installed on the remote Windows host reportedly is affected by a buffer overflow involving the 'InstallProduct1' method, and possibly the 'InstallProduct' and 'InstallProduct2' methods as well. I...

Symantec IM Manager Detection

Symantec IM Manager, used to manage instant messaging traffic, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45017; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Flash Player < 10.0.45.2 Multiple Vulnerabilities (APSB10-06)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 10.0.45.2. Such versions are potentially affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. CVE-2010-0186 - An unspecified denial...

MS10-006: Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)

The version of the SMB client software installed on the remote Windows host is affected by two vulnerabilities that could allow arbitrary code execution : - Improper validation of fields in SMB responses can lead to a pool corruption issue and in turn to arbitrary code execution with SYSTEM level...

Netbiter Config NetbiterConfig.exe Device Hostname Remote Overflow

Binary data netbiterconfighostnameoverflow.nbin...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

Binary data 5256.prm...

Flash Player < 9.0.260 / 10.0.42.34 Multiple Vulnerabilities (APSB09-19)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.260 or 10.0.42.34. Such versions are potentially affected by multiple vulnerabilities : - A vulnerability in the parsing of JPEG data could lead to code execution. CVE-2009-3794 - A data injection...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3. Such versions are potentially affected by multiple vulnerabilities : - A vulnerability in the parsing of JPEG data could lead to code execution. CVE-2009-3794 - A data injection vulnerability could lead to code...