The version of Apple iTunes on the remote host is prior to version 12.0.1. It is, therefore, affected by multiple vulnerabilities related to the included version of WebKit. The errors could lead to application crashes or arbitrary code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201403-01 (Chromium, V8: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and V8. Please       review the CVE identifiers and release notes referenced below for       details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted website or JavaScript program using Chromium or V8, possibly       resulting in the execution of arbitrary code with the privileges of the       process or a Denial of Service condition. Furthermore, a remote attacker       may be able to bypass security restrictions or have other unspecified       impact.
  Workaround :

    There is no known workaround at this time.

Update to Chromium 30.0.1599.66 :

  - Easier searching by image 

  - A number of new apps/extension APIs 

  - Lots of under the hood changes for stability and     performance

  - Security fixes :

  + CVE-2013-2906: Races in Web Audio

  + CVE-2013-2907: Out of bounds read in Window.prototype     object

  + CVE-2013-2908: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2909: Use after free in inline-block rendering

  + CVE-2013-2910: Use-after-free in Web Audio

  + CVE-2013-2911: Use-after-free in XSLT

  + CVE-2013-2912: Use-after-free in PPAPI

  + CVE-2013-2913: Use-after-free in XML document parsing

  + CVE-2013-2914: Use after free in the Windows color     chooser dialog

  + CVE-2013-2915: Address bar spoofing via a malformed     scheme

  + CVE-2013-2916: Address bar spoofing related to the     &ldquo;204 No Content&rdquo; status code

  + CVE-2013-2917: Out of bounds read in Web Audio

  + CVE-2013-2918: Use-after-free in DOM

  + CVE-2013-2919: Memory corruption in V8

  + CVE-2013-2920: Out of bounds read in URL parsing

  + CVE-2013-2921: Use-after-free in resource loader

  + CVE-2013-2922: Use-after-free in template element

  + CVE-2013-2923: Various fixes from internal audits,     fuzzing and other initiatives 

  + CVE-2013-2924: Use-after-free in ICU. Upstream bug

  - Add patch chromium-fix-altgrkeys.diff 

  - Make sure that AltGr is treated correctly (issue#296835)

  - Do not build with system libxml (bnc#825157)

  - Update to Chromium 31.0.1640.0

  - Bug and Stability Fixes

  - Fix destkop file for chromium by removing extension from     icon

  - Change the methodology for the Chromium packages. Build     is now based on an official tarball. As soon as the Beta     channel catches up with the current version, Chromium     will be based on the Beta channel instead of svn     snapshots

  - Update to 31.0.1632

  - Bug and Stability fixes

  - Added the flag --enable-threaded-compositing to the     startup script. This flag seems to be required when     hardware acceleration is in use. This prevents websites     from locking up on users in certain cases.

  - Update to 31.0.1627

  - Bug and Stability fixes

  - Update to 31.0.1619

  - bug and Stability fixes

  - require mozilla-nss-devel >= 3.14 and mozilla-nspr-devel     >= 4.9.5

  - Add patch exclude_ymp.diff to ensure that     1-click-install files are downloaded and NOT opened     (bnc#836059)

  - Update to 31.0.1611

  - Bug and stability fixes

  - Update to 31.0.1605

  - Bug and stability fixes

  - Change the startup script so that Chromium will not     start when the chrome_sandbox doesn't have the SETUID.
    (bnc#779448)

  - Update to 31.0.1601

  - Bug and stability fixes

  - Update to 30.0.1594

  - Bug and stability fixes

  - Correct specfile to properly own /usr/bin/chromium     (bnc#831584)

  - Chromium now expects the SUID-helper installed in the     same directory as chromium. So let's create a symlink to     the helper in /usr/lib

  - Update to 30.0.1587

  - Bug and stability fixes

  - Remove patch chromium-nss-compliant.diff (Upstream)

  - Update to 30.0.1575

  - Bug and stability fixes

  - Enable the gpu-sandbox again due to upstream fix     (chromium#255063)

  - Update to 30.0.1567

  - bug and Stability fixes

The version of Apple iTunes installed on the remote Windows host is prior to 12.0.1. It is, therefore, affected by multiple vulnerabilities due to the included version of WebKit. The errors could lead to application crashes or arbitrary code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apple Safari installed on the remote Mac OS X host is prior to 6.1.1 or 7.0.1. It is, therefore, potentially affected by several issues :

  - A use-after-free error exists related to 'inline-block'     rendering. (CVE-2013-2909)

  - Multiple, unspecified memory corruption vulnerabilities     exist in WebKit that could lead to unexpected program     termination or arbitrary code execution. (CVE-2013-5195,     CVE-2013-5196, CVE-2013-5197, CVE-2013-5198,     CVE-2013-5199, CVE-2013-5225, CVE-2013-5228)

  - Multiple information disclosure vulnerabilities exist     due to an origin-validation error in which user     information is auto-filled into a sub-frame from a     different domain. (CVE-2013-5227)

The mobile device is running a version of iOS that is prior to version 7.1. It is, therefore, affected by vulnerabilities in the following components :

  - Backup
  - Certificate Trust Policy
  - Configuration Profiles
  - CoreCapture
  - Crash Reporting
  - dyld
  - FaceTime
  - ImageIO
  - IOKit HID Event
  - iTunes Store
  - Kernel
  - Office Viewer
  - Photos Backend
  - Profiles
  - Safari
  - Settings - Accounts
  - Springboard
  - SpringBoard Lock Screen
  - TelephonyUI Framework
  - USB Host
  - Video Driver
  - WebKit

ID	名前	製品	ファミリー	公開日	更新日	深刻度
78598	Apple iTunes < 12.0.1 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	2014/10/21	2026/10/12	critical
72851	GLSA-201403-01 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/3/6	2021/1/6	critical
75170	openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
78597	Apple iTunes < 12.0.1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	2014/10/21	2026/10/12	critical
71498	Mac OS X : Apple Safari < 6.1.1 / 7.0.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2013/12/17	2019/11/27	high
72907	Apple iOS < 7.1 Multiple Vulnerabilities	Nessus	Mobile Devices	2014/3/10	2026/10/29	high

検出

プラグインの検索

critical

critical

high

critical

high

high