The mobile device is running a version of iOS prior to 9.2.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Disk Images
  - IOHIDFamily
  - IOKit
  - Kernel
  - libxslt
  - syslog
  - WebKit
  - WebKit CSS
  - WebSheet

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.3. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AppleGraphicsPowerManagement
  - Disk Images
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - Kernel
  - libxslt
  - OSA Scripts
  - syslog

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

According to its banner, the remote Apple TV device is a version prior to 9.1.1. It is, therefore, affected by the following vulnerabilities :

  - A type confusion error exists in the bundled libxslt     library due to improper handling of invalid values. An     attacker can exploit this to crash the application,     resulting in a denial of service condition.
    (CVE-2015-7995)

  - A memory corruption issue exists due to improper     validation of user-supplied input when handling disk     images. A local attacker can exploit this to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2016-1717)

  - A use-after-free error exists in the IOHIDFamily API     due to improper validation of user-supplied input. A     local attacker can exploit this to dereference already     freed memory, resulting in a denial of service condition     or the execution of arbitrary code. (CVE-2016-1719)

  - A memory corruption issue exists in IOKit due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1720)

  - A memory corruption issue exists in the Kernel due to     improper validation of user-supplied input. A local     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1721)

  - An overflow condition exists in the     add_lockdown_session() function due to improper     validation of user-supplied input. A local attacker can     exploit this to cause a heap-based buffer overflow,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2016-1722)

  - Multiple memory corruption issues exist in WebKit due to     improper validation of user-supplied input. A remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2016-1724, CVE-2016-1727)

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.3 and is affected by multiple vulnerabilities in the following components :

 - AppleGraphicsPowerManagement
 - Disk Images
 - IOAcceleratorFamily
 - IOHIDFamily
 - IOKit
 - Kernel
 - libxslt
 - OSA Scripts
 - syslog

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Versions of Apple TV earlier than 9.1.1 are unpatched for vulnerabilities in the following components :

 - Disk Images (CVE-2016-1717)
 - IOHIDFamily (CVE-2016-1719)
 - IOKit (CVE-2016-1720)
 - Kernel (CVE-2016-1721)
 - libxslt (CVE-2015-7995)
 - syslog (CVE-2016-1722)
 - WebKit (CVE-2016-1724, CVE-2016-1727)

The remote host is running a version of iOS that is prior to version 9.2.1 and the following components contain vulnerabilities :

 - Disk Images
 - IOHIDFamily
 - IOKit
 - Kernel
 - libxslt
 - syslog
 - WebKit
 - WebKit CSS
 - WebSheet

ID	Name	Product	Family	Published	Updated	Severity
88050	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus	Mobile Devices	1/21/2016	9/4/2024	high
88047	Mac OS X 10.11.x < 10.11.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	1/21/2016	5/28/2024	high
88418	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus	Misc.	1/27/2016	12/14/2018	high
9326	Mac OS X 10.11.x < 10.11.3 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	5/27/2016	3/6/2019	high
9335	Apple TV < 9.1.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	5/27/2016	3/6/2019	high
9330	Apple iOS < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	5/26/2016	3/6/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high