The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

Versions of Apple TV earlier than 9.1.1 are unpatched for vulnerabilities in the following components :

 - Disk Images (CVE-2016-1717)
 - IOHIDFamily (CVE-2016-1719)
 - IOKit (CVE-2016-1720)
 - Kernel (CVE-2016-1721)
 - libxslt (CVE-2015-7995)
 - syslog (CVE-2016-1722)
 - WebKit (CVE-2016-1724, CVE-2016-1727)

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.3 and is affected by multiple vulnerabilities in the following components :

 - AppleGraphicsPowerManagement
 - Disk Images
 - IOAcceleratorFamily
 - IOHIDFamily
 - IOKit
 - Kernel
 - libxslt
 - OSA Scripts
 - syslog

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of iOS that is prior to version 9.2.1 and the following components contain vulnerabilities :

 - Disk Images
 - IOHIDFamily
 - IOKit
 - Kernel
 - libxslt
 - syslog
 - WebKit
 - WebKit CSS
 - WebSheet

According to its banner, the remote Apple TV device is a version prior to 9.1.1. It is, therefore, affected by the following vulnerabilities :

  - A type confusion error exists in the bundled libxslt     library due to improper handling of invalid values. An     attacker can exploit this to crash the application,     resulting in a denial of service condition.
    (CVE-2015-7995)

  - A memory corruption issue exists due to improper     validation of user-supplied input when handling disk     images. A local attacker can exploit this to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2016-1717)

  - A use-after-free error exists in the IOHIDFamily API     due to improper validation of user-supplied input. A     local attacker can exploit this to dereference already     freed memory, resulting in a denial of service condition     or the execution of arbitrary code. (CVE-2016-1719)

  - A memory corruption issue exists in IOKit due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1720)

  - A memory corruption issue exists in the Kernel due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1721)

  - An overflow condition exists in the     add_lockdown_session() function due to improper     validation of user-supplied input. A local attacker can     exploit this to cause a heap-based buffer overflow,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2016-1722)

  - Multiple memory corruption issues exist in WebKit due to     improper validation of user-supplied input. A remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1724, CVE-2016-1727)

The mobile device is running a version of iOS prior to 9.2.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Disk Images
  - IOHIDFamily
  - IOKit
  - Kernel
  - libxslt
  - syslog
  - WebKit
  - WebKit CSS
  - WebSheet

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.3. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AppleGraphicsPowerManagement
  - Disk Images
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - Kernel
  - libxslt
  - OSA Scripts
  - syslog

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Severity
9335	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	high
9326	Mac OS X 10.11.x < 10.11.3 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	high
9330	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
88418	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus	Misc.	high
88050	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high
88047	Mac OS X 10.11.x < 10.11.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2016-1717

high

Tenable Plugins

high

high

high

high

high

high