Apple iOS < 8.4.1 Multiple Vulnerabilities

High Nessus Plugin ID 85407

Synopsis

The version of iOS running on the mobile device is affected by multiple vulnerabilities.

Description

The mobile device is running a version of iOS prior to version 8.4.1.
It is, therefore, affected by vulnerabilities in the following components :

 - Air Traffic
 - AppleFileConduit
 - Backup
 - bootp
 - CFPreferences
 - Certificate UI
 - CloudKit
 - Code Signing
 - CoreMedia Playback
 - CoreText
 - DiskImages
 - FontParser
 - IOHIDFamily
 - IOKit
 - ImageIO
 - Kernel
 - Libc
 - Libinfo
 - libpthread
 - libxml2
 - libxpc
 - Location Framework
 - MSVDX Driver
 - MobileInstallation
 - Office Viewer
 - QL Office
 - Safari
 - Sandbox_profiles
 - UIKit WebView
 - Web
 - WebKit

Solution

Upgrade to Apple iOS version 8.4.1 or later.

See Also

https://support.apple.com/en-us/HT205030

Plugin Details

Severity: High

ID: 85407

File Name: apple_ios_841_check.nbin

Version: 1.56

Type: local

Published: 2015/08/14

Updated: 2020/02/26

Dependencies: 60033

Risk Information

Risk Factor: High

CVSS Score Source: CVE-2015-5757

CVSS v2.0

Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:apple:iphone_os

Required KB Items: mdm/dependency/unlocked

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2015/08/13

Vulnerability Publication Date: 2015/08/13

Reference Information

CVE: CVE-2012-6685, CVE-2014-0191, CVE-2014-3660, CVE-2015-3729, CVE-2015-3730, CVE-2015-3731, CVE-2015-3732, CVE-2015-3733, CVE-2015-3734, CVE-2015-3735, CVE-2015-3736, CVE-2015-3737, CVE-2015-3738, CVE-2015-3739, CVE-2015-3740, CVE-2015-3741, CVE-2015-3742, CVE-2015-3743, CVE-2015-3744, CVE-2015-3745, CVE-2015-3746, CVE-2015-3747, CVE-2015-3748, CVE-2015-3749, CVE-2015-3750, CVE-2015-3751, CVE-2015-3752, CVE-2015-3753, CVE-2015-3755, CVE-2015-3756, CVE-2015-3758, CVE-2015-3759, CVE-2015-3763, CVE-2015-3766, CVE-2015-3768, CVE-2015-3776, CVE-2015-3778, CVE-2015-3782, CVE-2015-3784, CVE-2015-3793, CVE-2015-3795, CVE-2015-3796, CVE-2015-3797, CVE-2015-3798, CVE-2015-3800, CVE-2015-3802, CVE-2015-3803, CVE-2015-3804, CVE-2015-3805, CVE-2015-3806, CVE-2015-3807, CVE-2015-5746, CVE-2015-5749, CVE-2015-5752, CVE-2015-5755, CVE-2015-5756, CVE-2015-5757, CVE-2015-5758, CVE-2015-5759, CVE-2015-5761, CVE-2015-5766, CVE-2015-5769, CVE-2015-5770, CVE-2015-5773, CVE-2015-5774, CVE-2015-5775, CVE-2015-5776, CVE-2015-5777, CVE-2015-5778, CVE-2015-5781, CVE-2015-5782

BID: 67233, 70644, 76337, 76338, 76341, 76342, 76343, 76344

APPLE-SA: APPLE-SA-2015-08-13-3