The version of Apple Safari installed on the remote Mac OS X host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in remote code execution, in the following components :

  - WebKit
  - WebKit JavaScript Bindings
  - WebKit Page Loading

The version of iOS running on the mobile device is prior to 9.3.3. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in remote code execution, in the following components :

  - Calendar
  - CoreGraphics
  - FaceTime
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libxml2
  - libxslt
  - Safari
  - Sandbox Profiles
  - Siri Contacts
  - Web Media
  - WebKit
  - WebKit JavaScript Bindings
  - WebKit Page Loading

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of the remote Apple TV device is prior to 9.2.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - CoreGraphics
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libxml2
  - libxslt
  - Sandbox Profiles
  - WebKit
  - WebKit Page Loading

Note that only 4th generation models are affected by the vulnerabilities.

Versions of Apple TV 9.2.x prior to 9.2.2 are affected by multiple vulnerabilities in the following components :

 - CFNetwork
 - CoreGraphics
 - IOAcceleratorFamily
 - IOHIDFamily
 - ImageIO
 - Kernel
 - libxml2
 - libxslt
 - Sandbox

The remote host is running a version of iOS 9.3.x prior to version 9.3.3, and the following components contain vulnerabilities :

 - CFNetwork
 - libxml2
 - WebKit
 - CoreGraphics
 - FaceTime
 - ImageIO
 - IOHIDFamily
 - Sandbox
 - Kernel
 - libxslt
 - Calender
 - IOAcceleratorFamily
 - Safari
 - Siri Contacts
 - Web Media

The version of Safari installed on the remote host is prior or equal to 9.1.1, and is affected by multiple vulnerabilities. These vulnerabilities are contained within the Webkit subcomponent.

ID	Name	Product	Family	Published	Updated	Severity
92358	Mac OS X : Apple Safari < 9.1.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	7/19/2016	11/19/2019	high
92359	Apple iOS < 9.3.3 Multiple Vulnerabilities	Nessus	Mobile Devices	7/19/2016	4/8/2024	critical
93511	Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3079-1)	Nessus	Ubuntu Local Security Checks	9/15/2016	10/20/2023	high
92494	Apple TV < 9.2.2 Multiple Vulnerabilities	Nessus	Misc.	7/21/2016	11/14/2019	critical
9430	Apple TV 9.2.x < 9.2.2 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	7/25/2016	3/6/2019	medium
9445	Apple iOS 9.3.x < 9.3.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	7/29/2016	3/6/2019	high
9550	Safari < 9.1.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	9/9/2016	3/6/2019	medium

Detections

Analytics

Plugins Search

high

critical

high

critical

medium

high

medium