The version of Apple tvOS installed on the remote host is greater or equal to 12.0.0 and prior to 12.3. It is, therefore, affected by the following vulnerabilities :

 - An application may be able to execute arbitrary code with system privileges. (CVE-2019-8593)

 - Processing a maliciously crafted movie file may lead to arbitrary code execution. (CVE-2019-8585)

 - A malicious application may be able to read restricted memory. (CVE-2019-8560)

 - A malicious application may be able to execute arbitrary code with system privileges. (CVE-2019-8605)

 - A local user may be able to cause unexpected system termination or read kernel memory. (CVE-2019-8576)

 - An application may be able to cause unexpected system termination or write kernel memory. (CVE-2019-8591)

 - A local user may be able to modify protected parts of the file system. (CVE-2019-8568)

 - A malicious application may be able to gain root privileges. (CVE-2019-8637)

 - An application may be able to gain elevated privileges. (CVE-2019-8577)

 - A maliciously crafted SQL query may lead to arbitrary code execution. (CVE-2019-8600)

 - A malicious application may be able to read restricted memory. (CVE-2019-8598)

 - A malicious application may be able to elevate privileges. (CVE-2019-8602)

 - An application may be able to execute arbitrary code with system privileges. (CVE-2019-8574)

 - Processing maliciously crafted web content may result in the disclosure of process memory. (CVE-2019-8607)

 - Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

 - A device may be passively tracked by its WiFi MAC address. (CVE-2019-8620)

Versions of Apple TV earlier than 10.2.2 are affected by multiple vulnerabilities in the following components :

 - CoreText
 - Kernel 
 - syslog
 - WebKit

Versions of Apple TV earlier than 10.2.1 are affected by multiple vulnerabilities :

 - A flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A use-after-free error exists in the handling of RenderLayer objects. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A logic flaw exists that allows a universal cross-site scripting (UXSS) attack. The issue is triggered when handling WebKit Editor commands. This may allow a context-dependent attacker to create a specially crafted web page that will execute arbitrary script code in a user's browser session within the trust relationship between their browser and any website. 

This product is also affected by vulnerabilities found in the following components:

 - AVEVideoEncoder
 - CoreAudio
 - CoreFoundation
 - Foundation
 - IOSurface
 - Kernel
 - SQLite
 - TextInput
 - WebKit
 - Web Inspector

Versions of Apple TV earlier than 10.2 are affected by multiple vulnerabilities :

 - An unspecified flaw exists related to 'nghttp2' and 'LibreSSL' that is triggered during the handling of a malicious HTTP/2 server. This may allow an attacker to have multiple unspecified impacts. (CVE-2017-2428)
 - A type confusion flaw exists that is triggered as certain input is not properly validated when parsing specially crafted M4A audio files. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2017-2430)
 - A use-after-free flaw exists in 'libc++' that is triggered when demangling C++ applications. This may allow a malicious application to dereference already freed memory and potentially execute arbitrary code. (CVE-2017-2441)
 - A flaw exists as OTR packets are not properly validated. By spoofing the TLS/SSL server via a packet that appears valid, an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) can disclose and optionally manipulate transmitted data. (CVE-2017-2448)
 - An overflow condition exists that is triggered as certain input is not properly validated when parsing specially crafted M4A audio files. This may allow a context-dependent attacker to cause a heap-based buffer overflow, potentially allowing execution of arbitrary code. (CVE-2017-2462)
 - An unspecified flaw exists that is triggered as certain input is not properly validated when parsing X.509 certificates. This may allow a context dependent-attacker to corrupt memory and potentially execute arbitrary code.

Additional flaws exist in the following components :

 - Carbon (CVE-2017-2379)
 - Carbon (CVE-2017-2379)
 - CoreGraphics (CVE-2017-2417, CVE-2017-2444)
 - CoreText (CVE-2017-2435, CVE-2017-2450, CVE-2017-2461)
 - FontParser (CVE-2017-2406, CVE-2017-2407, CVE-2017-2439, CVE-2017-2487)
 - ImageIO (CVE-2017-2416, CVE-2017-2432, CVE-2017-2467)
 - Kernel (CVE-2017-2401, CVE-2017-2440, CVE-2017-2456, CVE-2017-2472, CVE-2017-2473, CVE-2017-2474, CVE-2017-2478, CVE-2017-2482, CVE-2017-2483, CVE-2017-2490)
 - Keyboards (CVE-2017-2458)
 - libarchive (CVE-2017-2390)
 - Security (CVE-2017-2451)
 - Webkit (CVE-2017-2367, CVE-2017-2378, CVE-2017-2386, CVE-2017-2394, CVE-2017-2395, CVE-2017-2396, CVE-2017-2405, CVE-2017-2415, CVE-2017-2419, CVE-2017-2424, CVE-2017-2433, CVE-2017-2442, CVE-2017-2445, CVE-2017-2446, CVE-2017-2447, CVE-2017-2454, CVE-2017-2455, CVE-2017-2459, CVE-2017-2460, CVE-2017-2464, CVE-2017-2465, CVE-2017-2466, CVE-2017-2468, CVE-2017-2469, CVE-2017-2470, CVE-2017-2471, CVE-2017-2476, CVE-2017-2481)

Versions of Apple TV earlier than 10.1.1 are affected by multiple vulnerabilities in the following components :

 - CoreText
 - Kernel 
 - syslog
 - WebKit

Versions of Apple TV earlier than 10.1 are affected by multiple vulnerabilities in the following components :

 - 3DES
 - Audio
 - Audio
 - Certificates
 - CoreFoundation
 - CoreGraphics
 - CoreMedia External Displays
 - CoreMedia Playback
 - CoreText
 - FontParser
 - ICU
 - IOHDIXController
 - IOHIDFamily
 - IOKit 
 - ImageIO
 - kernel
 - libarchive
 - OCSP
 - Power Management
 - Profiles
 - WebKit
 - WebKit

Versions of Apple TV earlier than 10.0.1 are vulnerable to the following issues :

 - A flaw exists in WebKit when handling the location attribute that allows a unauthenticated, remote attacker to bypass the cross-origin policies and disclose sensitive user information. (CVE-2016-4613)
 - An out-of-bounds read error exists in the FontParser component when handling specially crafted font files that allows an unauthenticated, remote attacker to disclose sensitive information. (CVE-2016-4660)
 - An unspecified flaw exists in the Sandbox Profiles component that allows a local attacker, via a specially crafted application, to disclose the metadata of photo directories. (CVE-2016-4664)
 - An unspecified flaw exists in the Sandbox Profiles component that allows a local attacker, via a specially crafted application, to disclose the metadata of audio recordings. (CVE-2016-4665)
 - Multiple memory corruption issues exist in Webkit due to improper validation of user-supplied input.  An unauthenticated, remote attacker can exploit these to execute arbitrary code. (CVE-2016-4666, CVE-2016-4677)
 - Multiple unspecified flaws exist in the System Boot component, within MIG generated code, due to improper validation of input.  A local attacker can exploit these to terminate the system or execute arbitrary code with elevated privileges. (CVE-2016-4669)
 - A memory corruption issue exists in the CoreGraphics component when handling specially crafted JPEG files.  An unauthenticated, remote attacker can exploit this, via a specially crafted file, to cause a denial of service condition or the execution of arbitrary code. (CVE-2016-4673)
 - An unspecified logic issue exists in libxpc that allows a local attacker to execute arbitrary code with root privileges. (CVE-2016-4675)
 - A NULL pointer dereference flaw exists in AppleSMC's smcHandleYPCEvent facility that is due to insufficient locking, which may allow a local attacker to gain elevated privileges. (CVE-2016-4678)
 - A flaw exists in libarchive due to improper path validation when creating temporary files during archive extraction.  An unauthenticated, remote attacker can exploit this, via a symlink attack, to overwrite arbitrary files. (CVE-2016-4679)
 - An unspecified flaw exists in the Kernel component due to improper sanitization of input.  A local attacker can exploit this to disclose kernel memory contents. (CVE-2016-4680)
 - A flaw exists in the CFNetwork Proxies component when handling proxy credentials that allows a man-in-the-middle attacker to disclose sensitive user information. (CVE-2016-7579)
 - A race condition exists in multiple IOKit drivers related to how they use task struct pointers.  This may allow a local attacker to potentially execute arbitrary code with kernel-level privileges. (CVE-2016-7613)

Note that only 4th generation models are affected by these vulnerabilities.

Versions of Apple TV earlier than 10.0 are vulnerable to the following issues :

 - A flaw exists in libxml2 that is triggered as certain input is not properly validated.  This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-4658)
 - A flaw exists in FontParser that is triggered during the handling of a specially crafted font file. This may allow a context-dependent attacker to disclose information in process memory. (CVE-2016-4718)
 - An unspecified flaw exists in IOAcceleratorFamily that may allow a context-dependent attacker to disclose arbitrary contents of the memory.  No further details have been provided. (CVE-2016-4725)
 - A flaw exists in IOAcceleratorFamily that is triggered as certain input is not properly validated.  This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-4726)
 - A flaw exists in libxslt that is triggered as certain input is not properly validated.  This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-4738)
 - A flaw exists that is triggered during the handling of a signed disk image.  This may allow a local attacker to gain elevated privileges.  No further details have been provided by the vendor. (CVE-2016-4753)
 - A flaw exists in the kernel that is triggered as the system fails to properly handle locking.  This may allow a remote attacker to cause a denial of service. (CVE-2016-4772)
 - An out-of-bounds read flaw exists in the Kernel that that may allow a local attacker to disclose the contents of memory.  No further details have been provided. (CVE-2016-4773)
 - An out-of-bounds read flaw exists in the Kernel that that may allow a local attacker to disclose the contents of memory.  No further details have been provided. (CVE-2016-4774)
 - A flaw exists in the Kernel that is triggered as certain input is not properly validated.  This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-4775)
 - An out-of-bounds read flaw exists in the Kernel that that may allow a local attacker to disclose the contents of memory.  No further details have been provided. (CVE-2016-4776)
 - An untrusted pointer dereference flaw exists in the Kernel that may allow a local attacker to gain elevated privileges.  No further details have been provided by the vendor. (CVE-2016-4777)
 - A flaw exists in the Kernel that is triggered as certain input is not properly validated.  This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-4778)

Traffic observed from the remote host indicates Facebook, the social networking website, has been accessed.

The remote client is running the Apple TV application.

Versions of Apple TV earlier than 9.1 are vulnerable to the following issues :

 - A flaw exists within the 'IOAcceleratorFamily' component. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with system privileges. (CVE-2015-7109)
 - A use-after-free condition is triggered when parsing disk images. This may allow a local attacker to dereference already freed memory and potentially execute arbitrary code with kernel privileges. (CVE-2015-7110)
 - A memory corruption vulnerability exists within the 'ASN.1 decoder'. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted certificate. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2015-7059, CVE-2015-7060, CVE-2015-7061)
 - A flaw exists due to the program failing to properly perform authorization checks. This may allow a local attacker to install arbitrary configuration profiles. (CVE-2015-7062)
 - A flaw exists within legacy functionality that is triggered in the way Keychain access interacts with the Keychain agent. This may allow a local attacker to spoof as a valid Keychain server. (CVE-2015-7045)

'Libxml2' contains a flaw that is triggered as user-supplied input is not properly validated when handling XML content. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1762)

Versions of Apple TV 9.2.x earlier than 9.2.1 are vulnerable to the following issues :

 - 'Libxml2' contains an out-of-bounds read flaw in the 'xmlParseEndTag2()' function found within 'parser.c'. The vulnerability is triggered when parsing an end tag. This may allow a context-dependent attacker to crash a process linked against the library or potentially disclose memory contents. (CVE-2016-1838)
 - An out-of-bounds read flaw in the 'xmlNextChar()' function found within 'parserInternals.c' is triggered when parsing characters in an XML file. This may allow a context-dependent attacker to crash a process linked against the library or potentially disclose memory contents. (CVE-2016-1833)
 - An overflow condition exists within the 'htmlParseName()' and 'htmlParseNameComplex()' functions of 'HTMLparser.c'. The issue is triggered as user-supplied input is not properly validated when parsing characters in a range. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1839)
 - A use-after-free error is triggered when handling 'GraphicsContext' objects in memory. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and execute arbitrary code. (CVE-2016-1859)
 - A use-after-free error is triggered when handling 'TextTrack' objects in memory. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and execute arbitrary code. (CVE-2016-1856)
 - A use-after-free condition is triggered as user-supplied input is not properly validated when handling 'ArrayStorage DFG' optimization. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and execute arbitrary code. (CVE-2016-1857)

Versions of Apple TV 9.2.x prior to 9.2.2 are affected by multiple vulnerabilities in the following components :

 - CFNetwork
 - CoreGraphics
 - IOAcceleratorFamily
 - IOHIDFamily
 - ImageIO
 - Kernel
 - libxml2
 - libxslt
 - Sandbox

Amazon Cloud Music is an internet music streaming service available as a cross-platform client to both desktops and mobile devices. Traffic observed from this host indicates it is streaming music from Amazon Cloud Music.

Versions of Apple TV earlier than 9.2.1 are unpatched for vulnerabilities in the following components :

 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - OpenGL
 - WebKit
 - WebKit Canvas

Versions of Apple TV earlier than 9.2 are unpatched for vulnerabilities in the following components :

 - FontParser (CVE-2016-1740)
 - HTTPProtocol (CVE-2015-8659)
 - IOHIDFamily (CVE-2016-1748)
 - Kernel (CVE-2016-1750)
 - Kernel (CVE-2016-1753)
 - Kernel (CVE-2016-1751)
 - Kernel (CVE-2016-1754, CVE-2016-1755)
 - Kernel (CVE-2016-1752)
 - libxml2 (CVE-2015-1819, CVE-2015-5312, CVE-2015-7499, CVE-2015-7500, CVE-2015-7942, CVE-2015-8035, CVE-2015-8242, CVE-2016-1762)
 - Security (CVE-2016-1950)
 - TrueTypeScaler (CVE-2016-1775)
 - WebKit (CVE-2016-1783)
 - WebKit History (CVE-2016-1784)
 - Wi-Fi (CVE-2016-0801, CVE-2016-0802)

Versions of Apple TV earlier than 9.1.1 are unpatched for vulnerabilities in the following components :

 - Disk Images (CVE-2016-1717)
 - IOHIDFamily (CVE-2016-1719)
 - IOKit (CVE-2016-1720)
 - Kernel (CVE-2016-1721)
 - libxslt (CVE-2015-7995)
 - syslog (CVE-2016-1722)
 - WebKit (CVE-2016-1724, CVE-2016-1727)

Versions of Apple TV earlier than 9.1 are unpatched for vulnerabilities in the following components :

 - AppleMobileFileIntegrity (CVE-2015-7055)
 - Compression (CVE-2015-7054)
 - CoreGraphics (CVE-2015-7105)
 - CoreMedia Playback (CVE-2015-7074, CVE-2015-7075)
 - Disk Images (CVE-2015-7110)
 - dyld (CVE-2015-7072, CVE-2015-7079)
 - ImageIO (CVE-2015-7053)
 - IOAcceleratorFamily (CVE-2015-7109)
 - IOHIDFamily (CVE-2015-7111, CVE-2015-7112)
 - IOKit SCSI (CVE-2015-7068)
 - Kernel (CVE-2015-7040, CVE-2015-7041, CVE-2015-7042, CVE-2015-7043, CVE-2015-7083, CVE-2015-7084, CVE-2015-7047)
 - libarchive (CVE-2011-2895)
 - libc (CVE-2015-7038, CVE-2015-7039)
 - libxml2 (CVE-2015-7115, CVE-2015-7116)
 - MobileStorageMounter (CVE-2015-7051)
 - OpenGL (CVE-2015-7064, CVE-2015-7065)
 - Security (CVE-2015-7073)
 - Security (CVE-2015-7059, CVE-2015-7060, CVE-2015-7061)
 - Security (CVE-2015-7058)
 - WebKit (CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, CVE-2015-7103, CVE-2015-7104, CVE-2015-7066)

Versions of Apple TV earlier than 7.2.1 are unpatched for vulnerabilities in the following components :

 - bootp
 - CFPreferences
 - CloudKit
 - Code Signing
 - CoreMedia Playback
 - CoreText
 - DiskImages
 - FontParser
 - ImageIO
 - IOHIDFamily
 - IOKit
 - Kernel
 - Libc
 - Libinfo
 - libpthread
 - libxml2
 - libxpc
 - libxslt
 - Location Framework
 - Office Viewer
 - QL Office
 - Sandbox_profiles
 - WebKit

The remote host was detected to be using the Rhapsody online radio. Rhapsody is an online music subscription service that can be accessed through a browser or smartphone application.

The remote host is streaming music from Pandora online radio. Pandora is a music streaming and automated music recommendation service.

The remote host was observed connecting to Spotify streaming servers. Spotify is an online music streaming service that can be used through the browser or mobile/desktop application.

The remote client is running the Roku streaming media application.

According to its banner, the remote Apple TV device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - The IOHIDFamily allows attackers within physical proximity to execute a Denial of Service attack within a kernel context. (CVE-2015-1095)
 - The 'Podcasts' component allows remote attackers to discover unique identifiers by reading an asset-download request data. (CVE-2015-1110)
 - The Audio Drivers subsystem does not properly validate IOKit object metadata which allows an attacker to execute arbitrary code. (CVE-2015-1086)

Citrix GoToMyPC is a remote control software service that enables the user to operate their computer from another computer, over the Internet. Additionally, mobile device applications are available to remotely control the computer running GoToMyPC. This software uses a backchannel (viewed as an outgoing connection by your firewall) to communicate with the vendor's computers which then broker a connection between the GoToMyPC client and the computer. This host has been observed listening for GoToMyPC remote connections.

The remote host was starting an I2P router

According to its banner, the remote Apple TV device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - There is a flaw in the way that the IOSurface component handles "type confusion" which would allow a remote attacker to execute arbitrary code as a privileged user. (CVE-2015-1061)
 - The MobileStorageMounter component allows attackers to create arbitrary filesystem locations. (CVE-2015-1062)
 - The Secure Transport component allows remote attackers to downgrade the encryption cipher. (CVE-2015-1067)

According to its banner, the remote Apple TV device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - Memory corruption flaw within WebKit which can allow a remote attacker to execute arbitrary code or crash the application. (CVE-2014-4462, CVE-2014-4452)
 - Memory corruption flaw within IOSharedDataQueue which can allow a remote attacker to execute arbitrary code in a privileged context via a crafted application. (CVE-2014-4461)
 - Memory corruption flaw within the Mach-O executable files which allows local users to bypass code-signing restrictions. (CVE-2014-4455)

According to its banner, the remote Apple TV device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - Apple TV is bundled with Apple WebKit.  Apple WebKit is affected by several vulnerabilities which would allow a remote attacker to execute arbitrary code or crash the application. (CVE-2014-4476, CVE-2014-4477, CVE-2014-4459, CVE-2014-4479)
 - There is a directory-traversal flaw in the 'afc' component which can allow an attacker to access unintended files. (CVE-2014-4480)
 - There is a flaw in the 'mach_port_kobject' kernel interface which can allow an attacker to bypass the ASLR protection mechanism. (CVE-2014-4491, CVE-2014-4496)
 - There is an integer overflow in CoreGraphics which allows remote code execution. (CVE-2014-4481)
 - There is a buffer overflow in FontParser which allows remote code execution. (CVE-2014-4483)
 - There is a flaw in the way that FontParser handles crafted .dfont file which can lead to remote code execution. (CVE-2014-4484)
 - There is a buffer overflow in the XML parser portion of the Foundation component. (CVE-2014-4485)
 - The IOAcceleratorFamily invalidly handles certain types which can lead to a NULL pointer dereference. (CVE-2014-4486)
 - There is a buffer overflow in the IOHIDFamily component. (CVE-2014-4487)
 - The IOHIDFamily does not properly validate resource-queue metadata, allowing remote code execution. (CVE-2014-4488)
 - The IOHIDFamily fails to properly sanitize event queues.  This can lead to remote code execution. (CVE-2014-4489)
 - The kernel does not enforce read-only attributes which can allow attackers to bypass access restrictions. (CVE-2014-4495)
 - The libnetcore module fails to verify certain data types which can allow remote code execution in the _networkd context. (CVE-2014-4492)

Versions of Apple TV earlier than 7.0.1 are unpatched for two vulnerabilities:

  - SSL protocol 3.0 uses nondeterministic CBC padding, which exposes it to man-in-the-middle attacks (aka, the "POODLE" issue); the issue was fixed by disabling CBC cipher suites from use when TLS connection attempts fail (CVE-2014-3566)
  - Unencrypted Bluetooth input are allowed, which could be leveraged by an attacker to spoof Bluetooth connections; the issue was fixed by disallowing unencrypted connections (CVE-2014-4428)

The following components contain vulnerabilities that have since been patched in version 7.0:

  - 802.1X
  - Accounts
  - Accessibility
  - Accounts Framework
  - Address Book
  - App Installation
  - Assets
  - Bluetooth
  - CoreGraphics
  - Foundation
  - Home & Lock Screen
  - iMessage
  - IOAcceleratorFamily
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOHIDFamily
  - IOKit
  - Kernel
  - Libnotify
  - Mail
  - Profiles
  - Safari
  - Sandbox Profiles
  - syslog
  - WebKit

The following vulnerabilities have since been patched in version 6.1.2 :

  - iTunes store transaction may be completed without providing a valid password when prompted (CVE-2014-1383)
  - WebKit memory corruption vulnerabilities (CVE-2013-2875, CVE-2013-2927, CVE-2014-1323, CVE-2014-1325, CVE-2014-1326, CVE-2014-1327, CVE-2014-1329, CVE-2014-1330, CVE-2014-1331, CVE-2014-1333, CVE-2014-1334, CVE-2014-1335, CVE-2014-1336, CVE-2014-1337, CVE-2014-1338, CVE-2014-1339, CVE-2014-1341, CVE-2014-1342, CVE-2014-1343, CVE-2014-1362, CVE-2014-1363, CVE-2014-1364, CVE-2014-1365, CVE-2014-1366, CVE-2014-1367, CVE-2014-1368, CVE-2014-1382, CVE-2014-1731)
  - Various memory issues, inadequate bounds-checking, and null pointer derferencing issues that could potentially result in arbitrary code execution, with system privileges (CVE-2014-1355, CVE-2014-1356, CVE-2014-1357, CVE-2014-1358, CVE-2014-1359, CVE-2014-1361)

The remote device is a Sohu TV services client.  Sohu TV is an internet service for streaming media to a variety of devices.

The remote device is a Tencent services client.  Tencent is an internet service for streaming media to a variety of devices.

The remote device is a Baidu services client.  Baidu is an internet service for streaming media to a variety of devices.

The remote device is a Youku services client.  Youku is an internet service for streaming media to a variety of devices.

The remote device is a Kuaibo services client.  Kuaibo is an internet service for streaming media to a variety of devices.

The remote host is running the Real Time Messaging Protocol (RTMP) which was developed by Adobe Systems.  This protocol is used to stream audio and video to a Flash client.  The default connection port for RTMP is 1935.

The following have since been patched in version 6.1.1:

  - Set-Cookie HTTP headers are processed even if the connection closed before the header was complete. An attacker could leverage this to strip security settings and obtain the HTTP cookie. (CVE-2014-1296)
  - Information disclosure due to the IOKit object storing kernel pointers, which could be used by a local attacker to defeat kernel address space layout randomization. (CVE-2014-1320)
  - A 'triple handshake' vulnerability could be leveraged by an attacker on the local network to perform a man-in-the-middle attack. (CVE-2014-1295)
  - Multiple memory corruption issues in the underlying WebKit library. (CVE-2013-2871, CVE-2014-1298, CVE-2014-1299, CVE-2014-1300, CVE-2014-1302, CVE-2014-1303, CVE-2014-1304, CVE-2014-1305, CVE-2014-1307, CVE-2014-1308, CVE-2014-1309, CVE-2014-1310, CVE-2014-1311, CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)

Versions earlier than the Apple TV 6.1 update are vulnerable to multiple issues, the most serious of which could be leveraged to result in arbitrary code execution.

The remote host is running the H.248.1 Gateway Control Protocol.

The remote host is running the H.248.1 Gateway Control Protocol.  This protocol is used to manage calls between remote systems

The remote host is running the H.248.1 Gateway Control Protocol.  This protocol is used for setting up calls through a central server.

ID	Name	Severity
700719	Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities	Critical
700169	Apple TV < 10.2.2 Multiple Vulnerabilities	Critical
700118	Apple TV < 10.2.1 Multiple Vulnerabilities	Critical
700035	Apple TV < 10.2 Multiple Vulnerabilities	High
9932	Apple TV < 10.1.1 Multiple Vulnerabilities	High
9848	Apple TV < 10.1 Multiple Vulnerabilities	High
9757	Apple TV < 10.0.1 Multiple Vulnerabilities	High
9621	Apple TV < 10.0 Multiple Vulnerabilities	Critical
5885	Facebook Usage Detection via UDP	Info
9434	Apple TV Client Detection	Info
9433	Apple TV < 9.1 Multiple Vulnerabilities	High
9432	Apple TV < 9.2 Remote Code Execution	Critical
9431	Apple TV 9.2.x < 9.2.1 Multiple Vulnerabilities	Medium
9430	Apple TV 9.2.x < 9.2.2 Multiple Vulnerabilities	Medium
9359	Amazon Cloud Music Player Detection	Info
9337	Apple TV < 9.2.1 Multiple Vulnerabilities	High
9336	Apple TV < 9.2 Multiple Vulnerabilities	Critical
9335	Apple TV < 9.1.1 Multiple Vulnerabilities	High
9334	Apple TV < 9.1 Multiple Vulnerabilities	Critical
9333	Apple TV < 7.2.1 Multiple Vulnerabilities	Medium
9225	Rhapsody Music Application Detection	Info
9168	Pandora Radio Streaming Detection	Info
9156	Spotify Music Streaming Detection via RTMP	Info
9155	Spotify Streaming Music Detection	Info
8862	Roku Client Detection	Info
8802	Apple TV < 7.2 Multiple Vulnerabilities	High
8794	Citrix GoToMyPC Server Detection	Info
8800	I2P Browsing Detection via DNS	Info
8674	Apple TV < 7.0.4 Multiple Vulnerabilities	High
8939	Apple TV < 7.0.2 Multiple Vulnerabilities	High
8640	Apple TV < 7.0.3 Multiple Vulnerabilities	Critical
8562	Apple TV < 7.0.1 Multiple Vulnerabilities	Medium
8392	Apple TV < 7 Multiple Vulnerabilities	Critical
8323	Apple TV < 6.1.2 Multiple Vulnerabilities	Critical
8300	Sohu TV Client Detection	Info
8298	Tencent Client Detection	Info
8297	Baidu Client Detection	Info
8296	Youku Client Detection	Info
8295	Kuaibo Client Detection	Info
8283	RTMP Connection Detection	Info
8282	RTMP Connection Detection	Info
8274	Apple TV < 6.1.1 Multiple Vulnerabilities	Medium
8250	Apple TV < 6.1 Multiple Vulnerabilities	High
8272	H.248.1 Host/Port Detection	Info
8271	H.248.1 Gateway Control Server Detection	Info
8270	H.248.1 Gateway Control Client Detection	Info
8269	H.248.1 User Detection	Info
8268	H.248.1 Host/Port Detection	Info
8267	H.248.1 Gateway Control Server Detection	Info
8266	H.248.1 Gateway Control Client Detection	Info

Internet Services Family for Nessus Network Monitor