A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.

The version of Apple iTunes installed on the remote Windows host is prior to 12.11.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT212609 advisory.

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     image may lead to arbitrary code execution. (CVE-2021-30785)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30779)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.5. It is, therefore, affected by multiple vulnerabilities:

  - A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big     Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service. (CVE-2021-1821)

  - This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS     14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur     11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox. (CVE-2021-30677)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.
    (CVE-2021-30748)

  - A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari     14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to     arbitrary code execution. (CVE-2021-30758)

  - A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina.
    Processing a maliciously crafted font file may lead to arbitrary code execution. (CVE-2021-30759)

  - An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004     Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
    (CVE-2021-30760)

  - An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur     11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to     execute arbitrary code with kernel privileges. (CVE-2021-30765, CVE-2021-30766)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. A sandboxed process may be able to circumvent     sandbox restrictions. (CVE-2021-30768)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5. A malicious     application may be able to gain root privileges. (CVE-2021-30772)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges. (CVE-2021-30774)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously     crafted audio file may lead to arbitrary code execution. (CVE-2021-30775)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an     unexpected application termination. (CVE-2021-30776)

  - An injection issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to     gain root privileges. (CVE-2021-30777)

  - This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to bypass Privacy preferences. (CVE-2021-30778)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30779)

  - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004     Catalina. A malicious application may be able to gain root privileges. (CVE-2021-30780)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local     attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30781)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update     2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access     restricted files. (CVE-2021-30782)

  - An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur     11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able     to circumvent sandbox restrictions. (CVE-2021-30783)

  - Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local     attacker may be able to execute code on the Apple T2 Security Chip. (CVE-2021-30784)

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     image may lead to arbitrary code execution. (CVE-2021-30785)

  - A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or     arbitrary code execution. (CVE-2021-30786)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update     2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to cause unexpected system     termination or write kernel memory. (CVE-2021-30787)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a     maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
    (CVE-2021-30788)

  - An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS     Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     font file may lead to arbitrary code execution. (CVE-2021-30789)

  - An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in     macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Opening a     maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
    (CVE-2021-30790)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS     Big Sur 11.5. Processing a maliciously crafted file may disclose user information. (CVE-2021-30791)

  - An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30792)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute     arbitrary code with kernel privileges. (CVE-2021-30793)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7,     Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2021-30795)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing a maliciously crafted image     may lead to a denial of service. (CVE-2021-30796)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.
    (CVE-2021-30797)

  - A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur     11.5, watchOS 7.6. A malicious application may be able to bypass certain Privacy preferences.
    (CVE-2021-30798)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30799)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to access a user's recent Contacts. (CVE-2021-30803)

  - A permissions issue was addressed with improved validation. This issue is fixed in iOS 14.7. A malicious     application may be able to access Find My data. (CVE-2021-30804)

  - A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big     Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able     to execute arbitrary code with kernel privileges. (CVE-2021-30805)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to access data about the accounts the user is using Family Sharing with.
    (CVE-2021-30817)

  - This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big     Sur 11.5. A local attacker may be able to access analytics data. (CVE-2021-30871)

  - A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS     Big Sur 11.5. An application may be able to gain elevated privileges. (CVE-2021-31004)

  - Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS     7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy     preferences. (CVE-2021-31006)

  - There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to     be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact     from this flaw is to confidentiality, integrity, and availability. (CVE-2021-3518)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.7. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 0.0.x prior to Catalina Security Update 2021-004 Catalina. It is, therefore, affected by multiple vulnerabilities : Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
152752	Apple iTunes < 12.11.4 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	high
152751	Apple iTunes < 12.11.4 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	high
152038	macOS 11.x < 11.5 Multiple Vulnerabilities (HT212602)	Nessus	MacOS X Local Security Checks	critical
152037	Apple iOS < 14.7 Multiple Vulnerabilities (HT212601)	Nessus	Mobile Devices	critical
152036	macOS 10.15.x < Catalina Security Update 2021-004 Catalina (HT212600)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2021-30785

high

Tenable Plugins

high

high

critical

critical

critical