WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data,     which allows remote attackers to obtain sensitive information about a device's physical environment via a     crafted web site. (CVE-2016-1780)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is running a version of iOS that is prior to version 9.3 and the following components contain vulnerabilities :

 - AppleUSBNetworking
 - FontParser
 - HTTPProtocol
 - IOHIDFamily
 - Kernel
 - LaunchServices
 - libxml2
 - Messages
 - Profiles
 - Security
 - TrueTypeScaler
 - WebKit
 - Wi-Fi

The mobile device is running a version of iOS prior to version 9.3. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AppleUSBNetworking
  - FontParser
  - HTTPProtocol
  - IOHIDFamily
  - Kernel
  - LaunchServices
  - libxml2
  - Messages
  - Profiles
  - Security
  - TrueTypeScaler
  - WebKit
  - Wi-Fi

ID	Name	Product	Family	Severity
263553	Linux Distros Unpatched Vulnerability : CVE-2016-1780	Nessus	Misc.	medium
9331	Apple iOS < 9.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
90118	Apple iOS < 9.3 Multiple Vulnerabilities	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2016-1780

medium

Tenable Plugins

medium

high

critical