Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors.

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.1. Mac OS X 10.10.1 contains several security-related fixes for the following components :

  - CFNetwork (CVE-2014-4460)
 - Spotlight (CVE-2014-4453)
 - System Profiler About This Mac (CVE-2014-4458)
  - WebKit (CVE-2014-4459)

The mobile device is running a version of iOS prior to version 8.1.1.
It is, therefore, affected by vulnerabilities in the following components :

  - CFNetwork
  - dyld
  - Kernel
  - Lock Screen
  - Sandbox Profiles
  - Spotlight
  - WebKit

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.1. This update contains several security-related fixes for the following components :

  - CFNetwork
  - Spotlight
  - System Profiler About This Mac
  - WebKit

Note that successful exploitation of the most serious of these issues can result in arbitrary code execution.

ID	Name	Product	Family	Type	Severity
8643	Mac OS X < 10.10.1 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection		high
79312	Apple iOS < 8.1.1 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high
79310	Mac OS X 10.10.x < 10.10.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Combined	medium

Detections

Analytics

CVE-2014-4453

high

Tenable Plugins

high

high

medium