The version of Apple iTunes installed on the remote Windows host is older than 10.7 and is, therefore, affected by multiple memory corruption vulnerabilities in WebKit.

The version of Apple iTunes on the remote host is prior to version 10.7. It is, therefore, affected by multiple memory corruption vulnerabilities in the WebKit component.

The mobile device is running a version of iOS that is older than version 6.1.  This version contains security-related fixes for the following issues :

  - An error related to 'EUC-JP' encoding could allow cross-     site scripting attacks. (CVE-2011-3058)

  - An out-of-bounds read error exists related to 802.11i     information handling that could allow remote attackers     to disable WiFi. (CVE-2012-2619)

  - An error exists related to certificate-based     'Apple ID' authentication that could allow improper     trust extension. (CVE-2013-0963)

  - An error exists related to the 'copyin' and 'copyout'     functions that could allow a user-mode process to access     the first page of kernel memory. (CVE-2013-0964)

  - An error exists related to Mobile Safari     preferences that could improperly allow JavaScript     to be enabled after a user has disabled it.
    (CVE-2013-0974)

  - Many errors exist related to the bundled 'WebKit'     components. (CVE-2012-2824, CVE-2012-2857,     CVE-2012-2889, CVE-2012-3606, CVE-2012-3607,     CVE-2012-3621, CVE-2012-3632, CVE-2012-3687,     CVE-2012-3701, CVE-2013-0948, CVE-2013-0949,     CVE-2013-0950, CVE-2013-0951, CVE-2013-0952,     CVE-2013-0953, CVE-2013-0954, CVE-2013-0955,     CVE-2013-0956, CVE-2013-0958, CVE-2013-0959,     CVE-2013-0962, CVE-2013-0968)

  - Two intermediate certificates, improperly issued by     TURKTRUST certificate authority, are incorrectly     trusted.

The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0.1.  It is, therefore, potentially affected by several issues :

  - A logic error in Safari's handling of the Quarantine     attribute caused the safe mode not to be triggered on     Quarantined files, which could lead to the disclosure     of local file contents. (CVE-2012-3713)

  - A rare condition in the handling of Form Autofill could     lead to the disclosure of information from the Address     Book 'Me' card that was not included in the Autofill     popover. (CVE-2012-3714)

  - A logic issue in the handling of HTTPS URLs in the     address bar when pasting text could result in the     request being sent over HTTP. (CVE-2012-3715)

  - Numerous issues exist in WebKit. (CVE-2011-3105 /     CVE-2012-2817 / CVE-2012-2818 / CVE-2012-2829 /     CVE-2012-2831 / CVE-2012-2842 / CVE-2012-2843 /     CVE-2012-3598 / CVE-2012-3601 / CVE-2012-3602 /     CVE-2012-3606 / CVE-2012-3607 / CVE-2012-3612 /     CVE-2012-3613 / CVE-2012-3614 / CVE-2012-3616 /     CVE-2012-3617 / CVE-2012-3621 / CVE-2012-3622 /     CVE-2012-3623 / CVE-2012-3624 / CVE-2012-3632 /     CVE-2012-3643 / CVE-2012-3647 / CVE-2012-3648 /     CVE-2012-3649 / CVE-2012-3651 / CVE-2012-3652 /     CVE-2012-3654 / CVE-2012-3657 / CVE-2012-3658 /     CVE-2012-3659 / CVE-2012-3660 / CVE-2012-3671 /     CVE-2012-3672 / CVE-2012-3673 / CVE-2012-3675 /     CVE-2012-3676 / CVE-2012-3677 / CVE-2012-3684 /     CVE-2012-3685 / CVE-2012-3687 / CVE-2012-3688 /     CVE-2012-3692 / CVE-2012-3699 / CVE-2012-3700 /     CVE-2012-3701 / CVE-2012-3702 / CVE-2012-3703 /     CVE-2012-3704 / CVE-2012-3705 / CVE-2012-3706 /     CVE-2012-3707 / CVE-2012-3708 / CVE-2012-3709 /     CVE-2012-3710 / CVE-2012-3711 / CVE-2012-3712)

The remote host has Safari installed. Versions of Safari earlier than 6.0.1 are reportedly affected by several issues :

  - A logic error in Safari's handling of the Quarantine attribute caused the safe mode not to be triggered on Quarantined files, which could lead to the disclosure of local file contents. (CVE-2012-3713)
 - A rare condition in the handling of Form Autofill could lead to the disclosure of information from the Address Book 'Me' card that was not included in the Autofill popover. (CVE-2012-3714)
 - A logic issue in the handling of HTTPS URLs in the address bar when pasting text could result in the request being sent over HTTP. (CVE-2012-3715)
 - Numerous issues exist in WebKit. (CVE-2011-3105, CVE-2012-2817, CVE-2012-2818, CVE-2012-2829, CVE-2012-2831, CVE-2012-2842, CVE-2012-2843, CVE-2012-3598, CVE-2012-3601, CVE-2012-3602, CVE-2012-3606, CVE-2012-3607, CVE-2012-3612, CVE-2012-3613, CVE-2012-3614, CVE-2012-3616, CVE-2012-3617, CVE-2012-3621, CVE-2012-3622,CVE-2012-3623, CVE-2012-3624, CVE-2012-3632, CVE-2012-3643, CVE-2012-3647, CVE-2012-3648, CVE-2012-3649, CVE-2012-3651, CVE-2012-3652,CVE-2012-3654, CVE-2012-3657, CVE-2012-3658,CVE-2012-3659, CVE-2012-3660, CVE-2012-3671,CVE-2012-3672, CVE-2012-3673, CVE-2012-3675,CVE-2012-3676, CVE-2012-3677, CVE-2012-3684,CVE-2012-3685, CVE-2012-3687, CVE-2012-3688,CVE-2012-3692, CVE-2012-3699, CVE-2012-3700,CVE-2012-3701, CVE-2012-3702, CVE-2012-3703,CVE-2012-3704, CVE-2012-3705, CVE-2012-3706,CVE-2012-3707, CVE-2012-3708, CVE-2012-3709,CVE-2012-3710, CVE-2012-3711, CVE-2012-3712)

The remote host has iTunes installed, a popular media player for Windows and Mac OS. 

Versions of iTunes earlier than 10.7 are reportedly affected by multiple memory corruption vulnerabilities in WebKit.

According to its banner, the remote Apple iOS device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - An error related to 'EUC-JP' encoding could allow cross-site scripting attacks. (CVE-2011-3058)
 - An out-of-bounds read error exists, related to 802.11i information handling, that could allow remote attackers to disable Wi-Fi. (CVE-2012-2619)
 - An error exists related to certificate-based 'Apple ID' authentication that could allow improper trust extension. (CVE-2013-0963)
 - An error exists related to the 'copyin' and 'copyout' functions that could allow a user-mode process to access the first page of kernel memory. (CVE-2013-0964)
 - An error exists related to Mobile Safari preferences that could improperly allow JavaScript to be enabled after a user has disabled it. (CVE-2013-0974)
 - Many errors exist related to the bundled 'WebKit' components. (CVE-2012-2824, CVE-2012-2857, CVE-2012-2889, CVE-2012-3606, CVE-2012-3607, CVE-2012-3621, CVE-2012-3632, CVE-2012-3687, CVE-2012-3701, CVE-2013-0948, CVE-2013-0949, CVE-2013-0950, CVE-2013-0951, CVE-2013-0952, CVE-2013-0953, CVE-2013-0954, CVE-2013-0955, CVE-2013-0956, CVE-2013-0958, CVE-2013-0959, CVE-2013-0962, CVE-2013-0968)
 - Two intermediate certificates, improperly issued by TURKTRUST certificate authority, are incorrectly trusted.

The remote Mac OS X host has Safari installed. 

Versions of Safari earlier than 6.0.1 are reportedly affected by several issues :

  - A logic error in Safari's handling of the Quarantine attribute caused the safe mode not to be triggered on Quarantined files, which could lead to the disclosure of local file contents. (CVE-2012-3713)

  - A rare condition in the handling of Form Autofill could lead to the disclosure of information from the Address Book 'Me' card that was not included in the Autofill popover. (CVE-2012-3714)

  - A logic issue in the handling of HTTPS URLs in the address bar when pasting text could result in the request being sent over HTTP. (CVE-2012-3715)

  - Numerous issues exist in WebKit. (CVE-2011-3105, CVE-2012-2817, CVE-2012-2818, CVE-2012-2829, CVE-2012-2831, CVE-2012-2842, CVE-2012-2843, CVE-2012-3598, CVE-2012-3601, CVE-2012-3602, CVE-2012-3606, CVE-2012-3607, CVE-2012-3612, CVE-2012-3613, CVE-2012-3614, CVE-2012-3616, CVE-2012-3617, CVE-2012-3621, CVE-2012-3622,CVE-2012-3623, CVE-2012-3624, CVE-2012-3632, CVE-2012-3643, CVE-2012-3647, CVE-2012-3648, CVE-2012-3649, CVE-2012-3651, CVE-2012-3652,CVE-2012-3654, CVE-2012-3657, CVE-2012-3658,CVE-2012-3659, CVE-2012-3660, CVE-2012-3671,CVE-2012-3672, CVE-2012-3673, CVE-2012-3675,CVE-2012-3676, CVE-2012-3677, CVE-2012-3684,CVE-2012-3685, CVE-2012-3687, CVE-2012-3688,CVE-2012-3692, CVE-2012-3699, CVE-2012-3700,CVE-2012-3701, CVE-2012-3702, CVE-2012-3703,CVE-2012-3704, CVE-2012-3705, CVE-2012-3706,CVE-2012-3707, CVE-2012-3708, CVE-2012-3709,CVE-2012-3710, CVE-2012-3711, CVE-2012-3712)

ID	Name	Product	Family	Published	Updated	Severity
62077	Apple iTunes < 10.7 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	9/13/2012	12/4/2019	critical
62078	Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	9/13/2012	12/4/2019	critical
64287	Apple iOS < 6.1 Multiple Vulnerabilities	Nessus	Mobile Devices	1/29/2013	4/8/2024	high
62216	Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/20/2012	7/16/2018	high
6582	Safari < 6.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	9/20/2012	3/6/2019	high
6575	iTunes < 10.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	9/14/2012	3/6/2019	high
6679	Apple iOS < 6.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	1/30/2013	3/6/2019	high
800990	Mac OS X : Safari < 6.0.1 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	9/20/2012		high

Detections

Analytics

Plugins Search

critical

critical

high

high

high

high

high

high