The version of Apple iTunes installed on the remote Windows host is older than 10.2.2.  As such, it is potentially affected by several issues :

  - An integer overflow issue in the handling of nodesets     could lead to a crash or arbitrary code execution.
    (CVE-2011-1290)

  - A use after free issue in the handling of text nodes     could lead to a crash or arbitrary code execution.
    (CVE-2011-1344)

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2011-0779     Google Chrome before 9.0.597.84 does not properly handle     a missing key in an extension, which allows remote     attackers to cause a denial of service (application     crash) via a crafted extension.

  - CVE-2011-1290     Integer overflow in WebKit allows remote attackers to     execute arbitrary code via unknown vectors, as     demonstrated by Vincenzo Iozzo, Willem Pinckaers, and     Ralf-Philipp Weinmann during a Pwn2Own competition at     CanSecWest 2011.

The version of Apple iTunes on the remote host is prior to version 10.2.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component :

  - An integer overflow vulnerability exists in the handling     of nodesets that can be exploited by a remote attacker     to execute arbitrary code. (CVE-2011-1290)

  - A use-after-free vulnerability exists in the handling of     text nodes that can be exploited by a remote attacker to     execute arbitrary code. (CVE-2011-1344)

Note that these only affect WebKit for Windows.

The version of Google Chrome installed on the remote host is earlier than 10.0.648.133.  Such versions are reportedly affected by a memory corruption vulnerability in style handling.

By tricking a user into opening a specially crafted web page, a remote unauthenticated attacker could execute arbitrary script code on the host subject to the privileges of the user running the affected application.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware     6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers     to execute arbitrary code via unknown vectors related to CSS style handling, nodesets, and a length     value, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own     competition at CanSecWest 2011. (CVE-2011-1290)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.5.  As such, it is potentially affected by several issues :

  - An integer overflow issue in the handling of nodesets     could lead to a crash or arbitrary code execution.
    (CVE-2011-1290)

  - A use-after-free issue in the handling of text nodes     could lead to a crash or arbitrary code execution.
    (CVE-2011-1344)

The version of Safari installed on the remote Windows host is earlier than 5.0.5.  It therefore is potentially affected by several issues :

  - An integer overflow issue in the handling of nodesets     could lead to a crash or arbitrary code execution.
    (CVE-2011-1290)

  - A use-after-free issue in the handling of text nodes     could lead to a crash or arbitrary code execution.
    (CVE-2011-1344)

Two issues in libwebkit have been fixed :

  - Webkit CSS Text Element Count remote code execution was     fixed. (CVE-2011-1290)

  - WebKit WBR Tag Removal remote code execution was fixed.
    (CVE-2011-1344)

The remote host has iTunes installed, a popular media player for Windows and Mac OS. 

Versions of iTunes earlier than 10.2.2 are potentially affected by several issues :

  - An integer overflow issue in the handling of nodesets could lead to a crash or arbitrary code execution. (CVE-2011-1290)

  - A use after free issue in the handling of text nodes could lead to a crash or arbitrary code execution. (CVE-2011-1344)

The remote mobile host is a using a version of Apple iOS earlier than 4.3.2. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.3.2 contains security fixes for the following components :

  - Certificate Trust Policy

  - libxslt

  - QuickLook

  - WebKit

The remote host has Safari installed. 

Versions of Safari earlier than 5.0.5 are potentially affected by several issues in the following component :

  - WebKit

Versions of Google Chrome earlier than 10.0.648.133 are potentially affected by a memory corruption vulnerability in style handling.  By tricking a user into opening a specially crafted web page, a remote unauthenticated attacker could execute arbitrary script code on the host subject to the privileges of the user running the affected application.

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS 4.2.5 or 4.2.6 are affected by vulnerabilities within the following components :

  - Certificate Trust Policy

  - QuickLook

  - WebKit

ID	Name	Product	Family	Published	Updated	Severity
53488	Apple iTunes < 10.2.2 Multiple (credentialed check)	Nessus	Windows	4/19/2011	11/15/2018	high
52674	Debian DSA-2192-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	3/16/2011	1/4/2021	critical
53489	Apple iTunes < 10.2.2 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	4/19/2011	11/15/2018	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	12/8/2010	1/6/2021	critical
52657	Google Chrome < 10.0.648.133 Code Execution	Nessus	Windows	3/14/2011	4/11/2022	high
263552	Linux Distros Unpatched Vulnerability : CVE-2011-1290	Nessus	Misc.	9/10/2025	9/10/2025	critical
53410	Mac OS X : Apple Safari < 5.0.5	Nessus	MacOS X Local Security Checks	4/14/2011	7/14/2018	high
53411	Safari < 5.0.5 Multiple Vulnerabilities	Nessus	Windows	4/14/2011	7/27/2018	high
64202	SuSE 11.2 Security Update : libwebkit (SAT Patch Number 7114)	Nessus	SuSE Local Security Checks	1/25/2013	1/19/2021	critical
5894	iTunes < 10.2.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	4/19/2011	3/6/2019	high
5888	Apple iOS < 4.3.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/14/2011	3/6/2019	critical
5890	Safari < 5.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/10/2011	3/6/2019	high
5818	Google Chrome < 10.0.648.133 Code Execution	Nessus Network Monitor	Web Clients	3/14/2011	3/6/2019	high
5889	Apple iOS 4.2.5 and 4.2.6 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/14/2011	3/6/2019	critical

Detections

Analytics

Plugins Search

high

critical

high

critical

high

critical

high

high

critical

high

critical

high

high

critical