The version of Apple iTunes installed on the remote Windows host is prior to 12.11.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT212609 advisory.

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     image may lead to arbitrary code execution. (CVE-2021-30785)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30779)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.5 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - An application may be able to execute arbitrary code with kernel privileges (CVE-2021-30805)

  - Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution     (CVE-2021-30790)

  - A local attacker may be able to cause unexpected application termination or arbitrary code execution     (CVE-2021-30781)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.7. It is, therefore, affected by multiple vulnerabilities including the following:

  - An unspecified vulnerability in Measure affecting availability, confidentiality and availability vectors.
  (CVE-2020-36329)

  - A stack overflow vulnerability in FontParser which was addressed with improved input validation.   (CVE-2021-30759)

  - An integer overflow vulnerability in FontParser which was addressed through improved input validation.
  (CVE-2021-30760)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
152752	Apple iTunes < 12.11.4 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	8/23/2021	9/24/2021	high
152038	macOS 11.x < 11.5 (HT212602)	Nessus	MacOS X Local Security Checks	7/23/2021	9/20/2021	critical
152751	Apple iTunes < 12.11.4 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	8/23/2021	9/24/2021	high
152037	Apple iOS < 14.7 Multiple Vulnerabilities (HT212601)	Nessus	Mobile Devices	7/23/2021	4/8/2024	critical

Detections

Analytics

Plugins Search

high

critical

high

critical