According to its banner, the version of the remote Apple TV device is prior to 9.2.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - CFNetwork Proxies
  - CommonCrypto
  - CoreCapture
  - Disk Images
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libc
  - libxml2
  - libxslt
  - OpenGL
  - WebKit
  - WebKit Canvas

Note that only 4th generation models are affected by the vulnerabilities.

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.1.1. It is, therefore, affected by the following vulnerabilities :

  - An information disclosure vulnerability exists due to a     failure to completely delete a user's browser history     when using the 'Clear History and Website Data' action.
    An attacker can exploit this to disclose sensitive     information. (CVE-2016-1849)

  - Multiple memory corruption issues exist in WebKit due to     improper validation of user-supplied input. A remote     attacker, via a specially crafted website, can exploit     these issues to execute arbitrary code. (CVE-2016-1854,     CVE-2016-1855, CVE-2016-1856, CVE-2016-1857,     CVE-2016-1859)

  - An information disclosure vulnerability exists in WebKit     due to insufficient taint tracking. A remote attacker     can exploit this, via a specially crafted SVG image, to     disclose information from another website.
    (CVE-2016-1858)

The mobile device is running a version of iOS prior to 9.3.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Accessibility
  - CFNetwork Proxies
  - CommonCrypto
  - CoreCapture
  - Disk Images
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libc
  - libxml2
  - libxslt
  - MapKit
  - OpenGL
  - Safari
  - Siri
  - WebKit
  - WebKit Canvas

Versions of Apple TV earlier than 9.2.1 are unpatched for vulnerabilities in the following components :

 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - OpenGL
 - WebKit
 - WebKit Canvas
 

The remote host is running a version of iOS that is prior to version 9.3.2 and the following components contain vulnerabilities :

 - Accessibility
 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - MapKit
 - OpenGL
 - Safari
 - Siri
 - WebKit
 - WebKit Canvas

ID	Name	Product	Family	Published	Updated	Severity
91311	Apple TV < 9.2.1 Multiple Vulnerabilities	Nessus	Misc.	5/24/2016	11/14/2019	high
91221	Mac OS X : Apple Safari < 9.1.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	5/18/2016	11/19/2019	high
91225	Apple iOS < 9.3.2 Multiple Vulnerabilities	Nessus	Mobile Devices	5/18/2016	9/4/2024	high
9337	Apple TV < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	5/27/2016	3/6/2019	high
9332	Apple iOS < 9.3.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	5/26/2016	3/6/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high