The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.

According to its banner, the version of the remote Apple TV device is prior to 9.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AppleMobileFileIntegrity
  - Compression
  - CoreGraphics
  - CoreMedia Playback
  - Disk Images
  - dyld
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit SCSI
  - Kernel
  - libarchive
  - libc
  - libxml2
  - MobileStorageMounter
  - OpenGL
  - Security
  - WebKit

Note that only 4th generation models are affected by the vulnerabilities.

Versions of Apple TV earlier than 9.1 are unpatched for vulnerabilities in the following components :

 - AppleMobileFileIntegrity (CVE-2015-7055)
 - Compression (CVE-2015-7054)
 - CoreGraphics (CVE-2015-7105)
 - CoreMedia Playback (CVE-2015-7074, CVE-2015-7075)
 - Disk Images (CVE-2015-7110)
 - dyld (CVE-2015-7072, CVE-2015-7079)
 - ImageIO (CVE-2015-7053)
 - IOAcceleratorFamily (CVE-2015-7109)
 - IOHIDFamily (CVE-2015-7111, CVE-2015-7112)
 - IOKit SCSI (CVE-2015-7068)
 - Kernel (CVE-2015-7040, CVE-2015-7041, CVE-2015-7042, CVE-2015-7043, CVE-2015-7083, CVE-2015-7084, CVE-2015-7047)
 - libarchive (CVE-2011-2895)
 - libc (CVE-2015-7038, CVE-2015-7039)
 - libxml2 (CVE-2015-7115, CVE-2015-7116)
 - MobileStorageMounter (CVE-2015-7051)
 - OpenGL (CVE-2015-7064, CVE-2015-7065)
 - Security (CVE-2015-7073)
 - Security (CVE-2015-7059, CVE-2015-7060, CVE-2015-7061)
 - Security (CVE-2015-7058)
 - WebKit (CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, CVE-2015-7103, CVE-2015-7104, CVE-2015-7066)
 

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.2 and is affected by multiple vulnerabilities in the following components :

 - apache_mod_php
 - AppSandbox
 - Bluetooth
 - CFNetwork HTTPProtocol
 - Compression
 - Configuration Profiles
 - CoreGraphics
 - CoreMedia Playback
 - Disk Images
 - EFI
 - File Bookmark
 - Hypervisor
 - iBooks
 - ImageIO
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOHIDFamily
 - IOKit SCSI
 - IOThunderboltFamily
 - Kernel
 - kext tools
 - Keychain Access
 - libarchive
 - libc
 - libexpat
 - libxml2
 - OpenGL
 - OpenLDAP
 - OpenSSH
 - QuickLook
 - Sandbox
 - Security
 - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of iOS that is prior to version 9.2 and the following components contain vulnerabilities :

 - AppleMobileFileIntegrity
 - AppSandbox
 - CFNetwork HTTPProtocol
 - Compression
 - CoreGraphics
 - CoreMedia Playback
 - dyld
 - GPUTools Framework
 - iBooks
 - ImageIO
 - IOHIDFamily
 - IOKit SCSI
 - Kernel
 - LaunchServices
 - libarchive
 - libc
 - libxml2
 - MobileStorageMounter
 - OpenGL
 - Photos
 - QuickLook
 - Safari
 - Sandbox
 - Security
 - Siri
 - WebKit

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - AppSandbox
  - Bluetooth
  - CFNetwork HTTPProtocol
  - Compression
  - Configuration Profiles
  - CoreGraphics
  - CoreMedia Playback
  - Disk Images
  - EFI
  - File Bookmark
  - Hypervisor
  - iBooks
  - ImageIO
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit SCSI
  - IOThunderboltFamily
  - Kernel
  - kext tools
  - Keychain Access
  - libarchive
  - libc
  - libexpat
  - libxml2
  - OpenGL
  - OpenLDAP
  - OpenSSH
  - QuickLook
  - Sandbox
  - Security
  - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - AppSandbox
  - Bluetooth
  - CFNetwork HTTPProtocol
  - Compression
  - Configuration Profiles
  - CoreGraphics
  - CoreMedia Playback
  - Disk Images
  - EFI
  - File Bookmark
  - Hypervisor
  - iBooks
  - ImageIO
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit SCSI
  - IOThunderboltFamily
  - Kernel
  - kext tools
  - Keychain Access
  - libarchive
  - libc
  - libexpat
  - libxml2
  - OpenGL
  - OpenLDAP
  - OpenSSH
  - QuickLook
  - Sandbox
  - Security
  - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The mobile device is running a version of iOS prior to version 9.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AppleMobileFileIntegrity
  - AppSandbox
  - CFNetwork HTTPProtocol
  - Compression
  - CoreGraphics
  - CoreMedia Playback
  - dyld
  - GPUTools Framework
  - iBooks
  - ImageIO
  - IOHIDFamily
  - IOKit SCSI
  - Kernel
  - LaunchServices
  - libarchive
  - libc
  - libxml2
  - MobileStorageMounter
  - OpenGL
  - Photos
  - QuickLook
  - Safari
  - Sandbox
  - Security
  - Siri
  - WebKit

ID	Name	Product	Family	Severity
94050	Apple TV < 9.1 Multiple Vulnerabilities	Nessus	Misc.	medium
9334	Apple TV < 9.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	critical
9325	Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
9329	Apple iOS < 9.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
87321	Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)	Nessus	MacOS X Local Security Checks	critical
87314	Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
87310	Apple iOS < 9.2 Multiple Vulnerabilities	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2015-7047

high

Tenable Plugins

medium

critical

critical

high

critical

critical

critical