Detections
Analytics
Apple iOS < 8.3 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 8803
Synopsis
The remote host is missing a critical Apple iOS patch update.Description
According to its banner, the remote Apple iOS device is missing a security update. It is, therefore, affected by the following vulnerabilities :- The IOHIDFamily allows attackers within physical proximity to execute a Denial of Service attack within a kernel context. (CVE-2015-1095)
- The 'Podcasts' component allows remote attackers to discover unique identifiers by reading an asset-download request data. (CVE-2015-1110)
- The CFNetwork component does not properly handle cookies which may allow an attacker to bypass Same Origin Policy. (CVE-2015-1089)
- The Audio Drivers subsystem does not properly validate IOKit object metadata which allows an attacker to execute arbitrary code. (CVE-2015-1086)
Solution
Upgrade to Apple iOS 8.3 or later.See Also
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
Plugin Details
Severity: High
ID: 8803
Family: Mobile Devices
Published: 7/10/2015
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.4
Temporal Score: 8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:apple:iphone_os
Patch Publication Date: 4/10/2015
Vulnerability Publication Date: 4/10/2015
Reference Information
CVE: CVE-2015-1086, CVE-2015-1089, CVE-2015-1095, CVE-2015-1110