The remote host is running a version of macOS / Mac OS X that is prior to Catalina Security Update 2021-005. It is, therefore, affected by multiple vulnerabilities, including the following:

  - Arbitrary code execution when processing a maliciously crafted image. (CVE-2021-30835, CVE-2021-30847)

  - An integer overflow issue due to insufficient input validation, which can lead to arbitrary code     execution by an unauthenticated attacker when processing a maliciously crafted PDF. (CVE-2021-30860)

  - Arbitrary code execution when processing a maliciously crafted dfont file. (CVE-2021-30841,     CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 10.15.x < Catalina Security Update 2021-005 Catalina (HT212805)

high Nessus Plugin ID 153432

Version 1.17

Version 1.16

Version 1.15

Version 1.17 May 28, 2024, 2:57 PM Plugin metadata (Add version information to CPEs) Plugin Feed: 202405281457
Version 1.16 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.15 Sep 29, 2022, 12:06 AM CISA reference Plugin Feed: 202209290006