The version of Google Chrome installed on the remote host is a version prior to 30.0.1599.101.  It is, therefore, affected by multiple vulnerabilities :

  - Use-after-free errors exist related to editing, forms,     and XmlHttpRequest (XHR). (CVE-2013-2925, CVE-2013-2926,     CVE-2013-2927)

  - Various, unspecified errors exist. (CVE-2013-2928)

Chromium was updated to 30.0.1599.114 :

Stable Channel update: fix build for 32bit systems

  - Update to Chromium 30.0.1599.101

  - Security Fixes :

  + CVE-2013-2925: Use after free in XHR

  + CVE-2013-2926: Use after free in editing

  + CVE-2013-2927: Use after free in forms.

  + CVE-2013-2928: Various fixes from internal audits,     fuzzing and other initiatives.

According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution.

Google Chrome Releases reports :

5 security fixes in this release, including :

- [292422] High CVE-2013-2925: Use after free in XHR. Credit to Atte Kettunen of OUSPG.

- [294456] High CVE-2013-2926: Use after free in editing. Credit to cloudfuzzer.

- [297478] High CVE-2013-2927: Use after free in forms. Credit to cloudfuzzer.

- [305790] High CVE-2013-2928: Various fixes from internal audits, fuzzing and other initiatives.

Security and bugfix update to Chromium 31.0.1650.57

  - Update to Chromium 31.0.1650.57 :

  - Security Fixes :

  - CVE-2013-6632: Multiple memory corruption issues.

  - Update to Chromium 31.0.1650.48 Stable Channel update :

  - Security fixes :

  - CVE-2013-6621: Use after free related to speech input     elements..

  - CVE-2013-6622: Use after free related to media elements. 

  - CVE-2013-6623: Out of bounds read in SVG.

  - CVE-2013-6624: Use after free related to     &ldquo;id&rdquo; attribute strings.

  - CVE-2013-6625: Use after free in DOM ranges.

  - CVE-2013-6626: Address bar spoofing related to     interstitial warnings.

  - CVE-2013-6627: Out of bounds read in HTTP parsing.

  - CVE-2013-6628: Issue with certificates not being checked     during TLS renegotiation.

  - CVE-2013-2931: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2013-6629: Read of uninitialized memory in libjpeg     and libjpeg-turbo.

  - CVE-2013-6630: Read of uninitialized memory in     libjpeg-turbo.

  - CVE-2013-6631: Use after free in libjingle.

  - Stable Channel update: fix build for 32bit systems

  - Update to Chromium 30.0.1599.101

  - Security Fixes :

  + CVE-2013-2925: Use after free in XHR

  + CVE-2013-2926: Use after free in editing

  + CVE-2013-2927: Use after free in forms.

  + CVE-2013-2928: Various fixes from internal audits,     fuzzing and other initiatives.

  - Enable ARM build for Chromium.

Chromium was updated to 31.0.1650.57: Stable channel update :

  - Security Fixes :

  - CVE-2013-6632: Multiple memory corruption issues.

  - Update to Chromium 31.0.1650.48 Stable Channel update :

  - Security fixes :

  - CVE-2013-6621: Use after free related to speech input     elements..

  - CVE-2013-6622: Use after free related to media elements. 

  - CVE-2013-6623: Out of bounds read in SVG.

  - CVE-2013-6624: Use after free related to     &ldquo;id&rdquo; attribute strings.

  - CVE-2013-6625: Use after free in DOM ranges.

  - CVE-2013-6626: Address bar spoofing related to     interstitial warnings.

  - CVE-2013-6627: Out of bounds read in HTTP parsing.

  - CVE-2013-6628: Issue with certificates not being checked     during TLS renegotiation.

  - CVE-2013-2931: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2013-6629: Read of uninitialized memory in libjpeg     and libjpeg-turbo.

  - CVE-2013-6630: Read of uninitialized memory in     libjpeg-turbo.

  - CVE-2013-6631: Use after free in libjingle.

  - Added patch chromium-fix-chromedriver-build.diff to fix     the chromedriver build

  - Enable ARM build for Chromium. 

  - Added patches chromium-arm-webrtc-fix.patch,     chromium-fix-arm-icu.patch and     chromium-fix-arm-sysroot.patch to resolve ARM specific     build issues

  - Update to Chromium 30.0.1599.114 Stable Channel update:
    fix build for 32bit systems

  - Drop patch chromium-fix-chromedriver-build.diff. This is     now fixed upstream

  - For openSUSE versions lower than 13.1, build against the     in-tree libicu

  - Update to Chromium 30.0.1599.101

  - Security Fixes :

  + CVE-2013-2925: Use after free in XHR

  + CVE-2013-2926: Use after free in editing

  + CVE-2013-2927: Use after free in forms.

  + CVE-2013-2928: Various fixes from internal audits,     fuzzing and other initiatives.

  - Update to Chromium 30.0.1599.66

  - Easier searching by image 

  - A number of new apps/extension APIs 

  - Lots of under the hood changes for stability and     performance

  - Security fixes :

  + CVE-2013-2906: Races in Web Audio

  + CVE-2013-2907: Out of bounds read in Window.prototype     object

  + CVE-2013-2908: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2909: Use after free in inline-block rendering

  + CVE-2013-2910: Use-after-free in Web Audio

  + CVE-2013-2911: Use-after-free in XSLT

  + CVE-2013-2912: Use-after-free in PPAPI

  + CVE-2013-2913: Use-after-free in XML document parsing

  + CVE-2013-2914: Use after free in the Windows color     chooser dialog

  + CVE-2013-2915: Address bar spoofing via a malformed     scheme

  + CVE-2013-2916: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2917: Out of bounds read in Web Audio

  + CVE-2013-2918: Use-after-free in DOM

  + CVE-2013-2919: Memory corruption in V8

  + CVE-2013-2920: Out of bounds read in URL parsing

  + CVE-2013-2921: Use-after-free in resource loader

  + CVE-2013-2922: Use-after-free in template element

  + CVE-2013-2923: Various fixes from internal audits,     fuzzing and other initiatives 

  + CVE-2013-2924: Use-after-free in ICU. Upstream bug

The mobile device is running a version of iOS that is prior to version 7.1. It is, therefore, affected by vulnerabilities in the following components :

  - Backup
  - Certificate Trust Policy
  - Configuration Profiles
  - CoreCapture
  - Crash Reporting
  - dyld
  - FaceTime
  - ImageIO
  - IOKit HID Event
  - iTunes Store
  - Kernel
  - Office Viewer
  - Photos Backend
  - Profiles
  - Safari
  - Settings - Accounts
  - Springboard
  - SpringBoard Lock Screen
  - TelephonyUI Framework
  - USB Host
  - Video Driver
  - WebKit

- Update to Chromium 31.0.1650.63 Stable channel update :

  - Security fixes :

  - CVE-2013-6634: Session fixation in sync related to 302     redirects

  - CVE-2013-6635: Use-after-free in editing

  - CVE-2013-6636: Address bar spoofing related to modal     dialogs

  - CVE-2013-6637: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2013-6638: Buffer overflow in v8

  - CVE-2013-6639: Out of bounds write in v8.

  - CVE-2013-6640: Out of bounds read in v8

  - and 12 other security fixes.

  - Remove the build flags to build according to the Chrome     ffmpeg branding and the proprietary codecs. (bnc#847971)

  - Update to Chromium 31.0.1650.57 Stable channel update :

  - Security Fixes :

  - CVE-2013-6632: Multiple memory corruption issues.

  - Update to Chromium 31.0.1650.48 Stable Channel update :

  - Security fixes :

  - CVE-2013-6621: Use after free related to speech input     elements..

  - CVE-2013-6622: Use after free related to media elements. 

  - CVE-2013-6623: Out of bounds read in SVG.

  - CVE-2013-6624: Use after free related to     &ldquo;id&rdquo; attribute strings.

  - CVE-2013-6625: Use after free in DOM ranges.

  - CVE-2013-6626: Address bar spoofing related to     interstitial warnings.

  - CVE-2013-6627: Out of bounds read in HTTP parsing.

  - CVE-2013-6628: Issue with certificates not being checked     during TLS renegotiation.

  - CVE-2013-2931: Various fixes from internal audits,     fuzzing and other initiatives.

  - CVE-2013-6629: Read of uninitialized memory in libjpeg     and libjpeg-turbo.

  - CVE-2013-6630: Read of uninitialized memory in     libjpeg-turbo.

  - CVE-2013-6631: Use after free in libjingle.

  - Added patch chromium-fix-chromedriver-build.diff to fix     the chromedriver build

  - Enable ARM build for Chromium. 

  - Added patches chromium-arm-webrtc-fix.patch,     chromium-fix-arm-icu.patch and     chromium-fix-arm-sysroot.patch to resolve ARM specific     build issues

  - Update to Chromium 30.0.1599.114 Stable Channel update:
    fix build for 32bit systems

  - Drop patch chromium-fix-chromedriver-build.diff. This is     now fixed upstream

  - For openSUSE versions lower than 13.1, build against the     in-tree libicu

  - Update to Chromium 30.0.1599.101

  - Security Fixes :

  + CVE-2013-2925: Use after free in XHR

  + CVE-2013-2926: Use after free in editing

  + CVE-2013-2927: Use after free in forms.

  + CVE-2013-2928: Various fixes from internal audits,     fuzzing and other initiatives.

  - Update to Chromium 30.0.1599.66

  - Easier searching by image 

  - A number of new apps/extension APIs 

  - Lots of under the hood changes for stability and     performance

  - Security fixes :

  + CVE-2013-2906: Races in Web Audio

  + CVE-2013-2907: Out of bounds read in Window.prototype     object

  + CVE-2013-2908: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2909: Use after free in inline-block rendering

  + CVE-2013-2910: Use-after-free in Web Audio

  + CVE-2013-2911: Use-after-free in XSLT

  + CVE-2013-2912: Use-after-free in PPAPI

  + CVE-2013-2913: Use-after-free in XML document parsing

  + CVE-2013-2914: Use after free in the Windows color     chooser dialog

  + CVE-2013-2915: Address bar spoofing via a malformed     scheme

  + CVE-2013-2916: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2917: Out of bounds read in Web Audio

  + CVE-2013-2918: Use-after-free in DOM

  + CVE-2013-2919: Memory corruption in V8

  + CVE-2013-2920: Out of bounds read in URL parsing

  + CVE-2013-2921: Use-after-free in resource loader

  + CVE-2013-2922: Use-after-free in template element

  + CVE-2013-2923: Various fixes from internal audits,     fuzzing and other initiatives 

  + CVE-2013-2924: Use-after-free in ICU. Upstream bug

The version of Apple iTunes on the remote host is prior to version 12.0.1. It is, therefore, affected by multiple vulnerabilities related to the included version of WebKit. The errors could lead to application crashes or arbitrary code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote host is a version prior to 30.0.1599.101. It is, therefore, affected by multiple vulnerabilities :

  - Use-after-free errors exist related to editing, forms,     and XmlHttpRequest (XHR). (CVE-2013-2925, CVE-2013-2926,     CVE-2013-2927)

  - Various, unspecified errors exist. (CVE-2013-2928)

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2013-2906     Atte Kettunen of OUSPG discovered race conditions in Web     Audio.

  - CVE-2013-2907     Boris Zbarsky discovered an out-of-bounds read in     window.prototype.

  - CVE-2013-2908     Chamal de Silva discovered an address bar spoofing     issue.

  - CVE-2013-2909     Atte Kuttenen of OUSPG discovered a use-after-free issue     in inline-block.

  - CVE-2013-2910     Byoungyoung Lee of the Georgia Tech Information Security     Center discovered a use-after-free issue in Web Audio.

  - CVE-2013-2911     Atte Kettunen of OUSPG discovered a use-after-free in     Blink's XSLT handling.

  - CVE-2013-2912     Chamal de Silva and 41.w4r10r(at)garage4hackers.com     discovered a use-after-free issue in the Pepper Plug-in     API.

  - CVE-2013-2913     cloudfuzzer discovered a use-after-free issue in Blink's     XML document parsing.

  - CVE-2013-2915     Wander Groeneveld discovered an address bar spoofing     issue.

  - CVE-2013-2916     Masato Kinugawa discovered an address bar spoofing     issue.

  - CVE-2013-2917     Byoungyoung Lee and Tielei Wang discovered an     out-of-bounds read issue in Web Audio.

  - CVE-2013-2918     Byoungyoung Lee discoverd an out-of-bounds read in     Blink's DOM implementation.

  - CVE-2013-2919     Adam Haile of Concrete Data discovered a memory     corruption issue in the V8 JavaScript library.

  - CVE-2013-2920     Atte Kuttunen of OUSPG discovered an out-of-bounds read     in URL host resolving.

  - CVE-2013-2921     Byoungyoung Lee and Tielei Wang discovered a     use-after-free issue in resource loading.

  - CVE-2013-2922     Jon Butler discovered a use-after-free issue in Blink's     HTML template element implementation.

  - CVE-2013-2924     A use-after-free issue was discovered in the     International Components for Unicode (ICU) library. 

  - CVE-2013-2925     Atte Kettunen of OUSPG discover a use-after-free issue     in Blink's XML HTTP request implementation.

  - CVE-2013-2926     cloudfuzzer discovered a use-after-free issue in the     list indenting implementation.

  - CVE-2013-2927     cloudfuzzer discovered a use-after-free issue in the     HTML form submission implementation. 

  - CVE-2013-2923 and CVE-2013-2928     The chrome 30 development team found various issues from     internal fuzzing, audits, and other studies.

ID	Name	Product	Family	Published	Updated	Severity
70892	Google Chrome < 30.0.1599.101 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	11/13/2013	11/27/2019	high
75205	openSUSE Security Update : chromium (openSUSE-SU-2013:1729-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
72962	Apple TV < 6.1 Multiple Vulnerabilities	Nessus	Misc.	3/12/2014	11/15/2018	high
70449	FreeBSD : chromium -- multiple vulnerabilities (710cd5d5-35cb-11e3-85f9-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	10/16/2013	1/6/2021	high
75212	openSUSE Security Update : chromium (openSUSE-SU-2013:1776-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
75225	openSUSE Security Update : chromium (openSUSE-SU-2013:1861-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
72907	Apple iOS < 7.1 Multiple Vulnerabilities	Nessus	Mobile Devices	3/10/2014	8/10/2026	high
75366	openSUSE Security Update : chromium (openSUSE-SU-2014:0065-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
78598	Apple iTunes < 12.0.1 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	10/21/2014	10/12/2026	critical
70494	Google Chrome < 30.0.1599.101 Multiple Vulnerabilities	Nessus	Windows	10/18/2013	5/19/2026	high
70636	Debian DSA-2785-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	10/27/2013	1/11/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

critical

critical

high

critical

critical

high

high