The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

According to its banner, the remote Apple TV device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - Memory corruption flaw within WebKit which can allow a remote attacker to execute arbitrary code or crash the application. (CVE-2014-4462, CVE-2014-4452)
 - Memory corruption flaw within IOSharedDataQueue which can allow a remote attacker to execute arbitrary code in a privileged context via a crafted application. (CVE-2014-4461)
 - Memory corruption flaw within the Mach-O executable files which allows local users to bypass code-signing restrictions. (CVE-2014-4455)

According to its banner, the remote Apple iOS device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - There is a memory corruption flaw within WebKit which can allow a remote attacker to execute arbitrary code or crash the application. (CVE-2014-4462, CVE-2014-4452)

 - There is a memory corruption flaw within IOSharedDataQueue which can allow a remote attacker to execute arbitrary code in a privileged context via a crafted application. (CVE-2014-4461)

 - There is a memory corruption flaw within the Mach-O executable files which allows local users to bypass code-signing restrictions. (CVE-2014-4455)

 - There is a flaw in the enforcement of the failed-passcode limit. (CVE-2014-4451)

 - The lock-screen protection control is vulnerable to a flaw which allows local users to bypass the failed-passcode limit. (CVE-2014-4463)

 - The Sandbox Profiles subsystem does not properly implement the debugserver sandbox, allowing a bypass of the existing controls. (CVE-2014-4457)

The remote host is running a version of Mac OS X 10.8 or 10.9 that does not have Security Update 2015-001 applied. This update contains several security-related fixes for the following components :

  - AFP Server
  - Bluetooth
  - CoreGraphics
  - CoreSymbolication
  - FontParser
  - Foundation
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - LoginWindow
  - lukemftp
  - OpenSSL
  - Sandbox
  - SceneKit
  - Security
  - security_taskgate
  - Spotlight
  - sysmond

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.2. This update contains several security-related fixes for the following components :

  - bash
  - Bluetooth
  - CFNetwork Cache
  - CommerceKit Framework
  - CoreGraphics
  - CoreSymbolication
  - CPU Software
  - FontParser
  - Foundation
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - IOUSBFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - LoginWindow
  - lukemftp
  - OpenSSL
  - Safari
  - SceneKit
  - Security
  - security_taskgate
  - Spotlight
  - SpotlightIndex
  - sysmond
  - UserAccountUpdater

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

According to its banner, the remote Apple TV device is a version prior to 7.0.2. It is, therefore, affected by the following vulnerabilities :

  - Multiple memory corruption issues exist related to the     included version of WebKit that allow application     crashes or arbitrary code execution. (CVE-2014-4452,     CVE-2014-4462)

  - A state management issue exists due to improperly     handling overlapping segments in Mach-O executable     files. A local user can exploit this issue to execute     unsigned code. (CVE-2014-4455)

  - A remote code execution issue exists due to improper     validation of metadata fields in IOSharedDataQueue     objects. (CVE-2014-4461)

The mobile device is running a version of iOS prior to version 8.1.1.
It is, therefore, affected by vulnerabilities in the following components :

  - CFNetwork
  - dyld
  - Kernel
  - Lock Screen
  - Sandbox Profiles
  - Spotlight
  - WebKit

ID	Name	Product	Family	Type	Severity
8939	Apple TV < 7.0.2 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services		high
8940	Apple iOS 8.x < 8.1.1 Multiple Vulnerabilities.	Nessus Network Monitor	Mobile Devices		high
81088	Mac OS X Multiple Vulnerabilities (Security Update 2015-001) (POODLE)	Nessus	MacOS X Local Security Checks	Local	critical
81087	Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)	Nessus	MacOS X Local Security Checks	Combined	critical
79360	Apple TV < 7.0.2 Multiple Vulnerabilities	Nessus	Misc.	Remote	high
79312	Apple iOS < 8.1.1 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high

Detections

Analytics

CVE-2014-4461

high

Tenable Plugins

high

high

critical

critical

high

high