The version of Safari installed on the remote host reportedly is affected by several issues :

  - An out-of-bounds memory read while handling BMP and GIF images may lead to information disclosure (CVE-2008-1573).
  - Safari will automatically launch executable files downloaded from a site if that site is in an IE7 zone with 'Launching applications and unsafe files' set to 'Enable' or an IE6 'Local intranet ' / ' Trusted sites' zone (CVE-2008-2306).
  - There is a memory corruption issue in WebKit's handling of JavaScript arrays that could be leveraged to crash the application or execute arbitrary code if visiting a malicious site (CVE-2008-2307).
  - When handling an object with an unrecognized content type, Safari does not prompt the user before downloading the object (aka, the 'carpet-bombing' issue). If the download location is the Windows Desktop (the default), this could lead to arbitrary code execution (CVE-2008-2540).

The remote host has Novell iPrint Client installed.  The installed version of Novell iPrint is affected by an unspecified vulnerability.

The remote host is running ClamAV client.

This version of ClamAV is vulnerable to a flaw within the 'memcpy()' function.  An attacker, exploiting this flaw, would be able to crash the ClamAV server or possibly execute code. 

The remote host is running the Novell NetWare iPrint Client.

 The version of Opera installed on the remote host reportedly is affected by several issues :

  - Improper handling of special characters in page addresses can make addresses look like other ones, aiding in phishing attacks.
  - Specially-crafted HTML canvas elements could violate the same-origin image policy.
  - Framed sources contained on the same parent page can modify each other's location.

The version of QuickTime installed on the remote Mac OS X host is older than 7.5.  Such versions contain several vulnerabilities :

  - There is a heap buffer overflow in QuickTime's handling of PICT image files that could result in a program crash or arbitrary code execution (CVE-2008-1583).
  - There is a memory corruption issue in QuickTime's handling of AAC-encoded media content that could result in a program crash or arbitrary code execution (CVE-2008-1582).
  - There is a stack buffer overflow in QuickTime's handling of Indeo video codec content that could result in a program crash or arbitrary code execution (CVE-2008-1584).
  - There is a URL handling issue in QuickTime's handling of 'file:' URLs that may allow launching of arbitrary applications (CVE-2008-1585).

The remote host is running the NOD32 antivirus software.  This version of NOD32 is vulnerable to multiple stack overflows.  An attacker exploiting this flaw would only need to send a malformed file to a system running the NOD32 antivirus software.  Successful exploitation would result in the attacker exploiting code on the remote system.

Versions of Mozilla Firefox 1.5.x prior to 1.5.0.3 are affected by various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.  The version of Firefox is vulnerable to multiple denial of service attacks, overflows, information disclosure, privilege escalation, and other issues.  An attacker exploiting these flaws would need to be able to convince a user to browse to a malicious URI.

The remote host is running ClamAV, an antivirus application.  There is a remote buffer overflow within this version of ClamAV.  Specifically, if an attacker were able to spoof or gain control of a ClamAV update server, the attacker could craft a malicious HTTP response that would trigger a buffer overflow.  Successful exploitation would result in the execution of arbitrary code. 

The remote host is using SeaMonkey. The installed version of SeaMonkey contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.  The version of SeaMonkey is vulnerable to multiple denial of service attacks, overflows, information disclosure, privilege escalation, and other issues.  An attacker exploiting these flaws would need to be able to convince a user to browse to a malicious URI.

The remote host is using Opera. The version of Opera installed on the remote host contains a buffer overflow that can be triggered by a long value within a stylesheet attribute.  Successful exploitation can lead to a browser crash and possibly allow for the execution of arbitrary code subject to the privileges of the user running Opera.

Versions of Mozilla Firefox prior to 1.7.13 are affected by various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host. Additionally, these versions are affected by multiple denial of service attacks, overflows, information disclosure, privilege escalation, and other issues.  An attacker exploiting these flaws would need to be able to convince a Mozilla user to browse to a malicious URI. 

Versions of Mozilla Firefox prior to 1.5.0.2 or 1.0.8 are affected by various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.  The version of Firefox is vulnerable to multiple denial of service attacks, overflows, information disclosure, privilege escalation, and other issues.  An attacker  exploiting these flaws would need to be able to convince a Firefox user to browse to a malicious URI. 

The remote host is running ClamAV, an antivirus application. There are a number of flaws that affect this version of ClamAV, and the vendor recommends upgrading to version 0.88.1 or higher. 

The remote host is running the NOD32 antivirus software.  This software is vulnerable to a flaw where local users can execute arbitrary code by quarantining a file and then 'restoring' the file in such a manner that, when next executed, the file is run with SYSTEM privileges.

The remote host is running AVG anti-virus.

The remote host is using a version of iCab that is prone to a security flaw that may allow a malicious website to influence a pop up window from a trusted site.
An attacker may exploit this flaw to impersonate third-party web servers and convince a victim on the remote host into revealing personal information. 

The remote host is using a version of Konqueror that is prone to a security flaw where a malicious website can bypass the browser Java sandbox.
As a result, an attacker may be able to read arbitrary files on the remote host by luring a victim into visiting a rogue website hosting a malicious Java applet. 

The remote host is using Gracebyte Network Assistant, a chat and instant messenger program for home and small office. The remote version of this software is vulnerable to a denial of service flaw. This may allow an attacker to crash the remote service. 

The remote host is using iTunes, a media player application for Windows and Mac OS X.  The remote version of this software is vulnerable to a buffer overflow. This may allow an attacker to execute code on the remote host. An attacker needs to send a malicious playlist to the user to exploit this flaw.

The remote host is using Dillo, an alternative web browser for Unix and Linux.
The remote version of this software is vulnerable to a format string vulnerability. This may allow an attacker to overwrite data in memory.

The remote host is running a vulnerable version of the Mozilla web browser. This version is based on a vulnerable version of libNSS, the Network Security Service library that implements the SSL/TLS protocol. It is reported that versions of libNSS up to 3.9.0 are prone to a remote heap overflow in the processing of the 'hello' message. An attacker may use this overflow to execute arbitrary code on the remote host.

The remote host is using a version of Opera that is affected by a security weakness that may permit an attacker to crash the remote web browser using Javascript.

The remote host is using a vulnerable version of Mozilla, an open-source web browser. It is reported that Mozilla versions prior 1.7.1 present an issue in the INPUT tag. An attacker may craft a malicious web page that may secretly upload files readable by the victim on a remote computer. 

ID	Name	Severity
4556	Safari < 3.1.2 Multiple Vulnerabilities	medium
4548	Novell iPrint Client Unspecified Vulnerability	medium
4547	ClamAV < 0.93.1 memcpy() Function Overflow (deprecated)	medium
4543	Novell NetWare iPrint Client Version Detection	info
4541	Opera < 9.50 Multiple Vulnerabilities	medium
4537	QuickTime < 7.5 Multiple Vulnerabilities	medium
4001	NOD32 < 2.70.37 Directory Name Handling Multiple Overflows	high
3531	Mozilla Firefox 1.5.x < 1.5.0.3 Multiple Vulnerabilities	medium
3525	ClamAV < 0.88.2 HTTP Header Remote Overflow (deprecated)	medium
3516	SeaMonkey < 1.0.1 Multiple Vulnerabilities	medium
3515	Opera < 8.54 signedness StyleSheet Overflow	medium
3514	Mozilla Firefox < 1.7.13 Multiple Vulnerabilities	medium
3512	Mozilla Firefox < 1.0.8 / 1.5.x < 1.5.0.2 Multiple Vulnerabilities	medium
3505	ClamAV < 0.88.1 Multiple Vulnerabilities (deprecated)	medium
3503	NOD32 < 2.51.26 Antivirus Local File Overwrite	high
3007	AVG AntiVirus Version Detection	info
2530	iCab Web Browser Remote Window Hijacking	low
2529	Konqueror < 3.3.2 Multiple Remote Java Sandbox Bypass	low
2521	Gracebyte Network Assistant Remote DoS	medium
2519	Apple iTunes < 4.7.1 Playlist Buffer Overflow	high
2512	Dillo < 0.8.4-rc1 Interface Message Format String	medium
2133	libNSS Hello Challenge Remote Heap Overflow	high
2130	Opera getElementsByTagName Javascript Method DoS	low
2116	Mozilla Firefox Input Type HTML Tag Unauthorized Access (deprecated)	high

Detections

Analytics

Web Clients Family for Nessus Network Monitor

medium

medium

medium

info

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

high

info

low

low

medium

high

medium

high

low

high