The mobile device is running a version of iOS that is older than version 6.0.1. This version contains security-related fixes for the following issues :

  - Kernel extension API responses containing     an 'OSBundleMachOHeaders' key may include kernel     addresses, which can aid in further attacks.
    (CVE-2012-3749)

  - The lock screen can provide 'Passbook' data to an     attacker having physical device access but not a     passcode. (CVE-2012-3750)

  - A time-of-check-to-time-of-use issue in the handling     of JavaScript array in WebKit could lead to arbitrary,     remote code execution. (CVE-2012-3748)

  - A use-after-free issue in the handling of SVG images     in WebKit code could lead to arbitrary, remote code     execution. (CVE-2012-5112)

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.3. The newer version contains multiple security-related fixes for the following components :

  - Apache
  - CoreTypes
  - International Components for Unicode
  - Identity Services
  - ImageIO
  - IOAcceleratorFamily
  - Kernel
  - Login Window
  - Messages
  - PDFKit
  - QuickTime
  - Security

Note that the update also runs a malware removal tool that will remove the most common variants of malware.

モバイルデバイスは、6.0.1 より前のバージョンの iOS を実行しています。このバージョンには、以下の問題に関するセキュリティ関連の修正が含まれています：

  -「OSBundleMachOHeaders」キーを含むカーネル拡張 API 応答にカーネルアドレスが含まれて、さらなる攻撃の助けとなる可能性があります。
    （CVE-2012-3749）

  - ロック画面から「Passbook」データを、パスコードを持たないが物理的にデバイスにアクセスできる攻撃者が得る可能性があります。（CVE-2012-3750）

  - WebKitのJavaScript配列の処理におけるtime-of-check-to-time-of-use問題が、任意のリモートコードの実行を引き起こす可能性があります。（CVE-2012-3748）

  - WebKitコードのSVG画像の処理におけるメモリ解放後使用（Use After Free）問題が任意のリモートコードの実行を引き起こす可能性があります。（CVE-2012-5112）

行動裝置執行的 iOS 版本比 6.0.1 舊。此版本包含下列問題的安全性相關修正：

  - 包含 'OSBundleMachOHeaders' 金鑰的核心延伸模組 API 回應中可能含有核心位址，其有助於發動進一步的攻擊。
    (CVE-2012-3749)

  - 鎖定螢幕可提供「Passbook」資料給具有實體裝置存取權但不知道密碼的攻擊者。 (CVE-2012-3750)

  - 在 WebKit 中處理 JavaScript 陣列時發生 time-of-check-to-time-of-use 問題，可導致任意遠端程式碼執行。(CVE-2012-3748)

  - WebKit 程式碼中的 SVG 影像處理存在一個釋放後使用問題，可導致任意遠端程式碼執行。 (CVE-2012-5112)

リモートホストが、バージョン 10.8.3 より前の Mac OS X 10.8.x を実行しています。新しいバージョンには、次のコンポーネントに対する複数のセキュリティ関連の修正が含まれています。

  - Apache
  - CoreTypes
  - International Components for Unicode
  - Identity Services
  - ImageIO
  - IOAcceleratorFamily
  - Kernel
  - Login Window
  - メッセージ
  - PDFKit
  - QuickTime
  - セキュリティ

注意：また、この更新ではマルウェア駆除ツールを実行し、これにより大半の一般的な種類のマルウェアは駆除されます。

移动设备正在运行的 iOS 版本低于版本 6.0.1。此版本包含对以下问题的安全相关补丁：

  - 包含“OSBundleMachOHeaders”项的内核扩展 API 响应可能含有内核地址，这样可为进一步攻击提供协助。
    (CVE-2012-3749)

  - 锁定屏幕可向具有物理设备访问权限但无密码的攻击者提供“Passbook”数据。(CVE-2012-3750)

  - 在对 WebKit 中的 JavaScript 数组进行处理时存在 time-of-check-to-time-of-use 问题，可导致远程执行任意代码。(CVE-2012-3748)

  - 在处理 WebKit 代码中的 SVG 图像时存在释放后使用问题，可导致远程执行任意代码。(CVE-2012-5112)

远程主机运行的 Mac OS X 10.8.x 版低于 10.8.3。更新的版本包含针对以下组件的与安全有关的多个补丁：

  - Apache
  - CoreTypes
  - International Components for Unicode
  - Identity Services
  - ImageIO
  - IOAcceleratorFamily
  - 内核
  - Login Window
  - 信息
  - PDFKit
  - QuickTime
  - 安全性

请注意，此更新还运行恶意软件删除工具，用于删除最常见的恶意软件变体。

遠端主機執行的 Mac OS X 10.8.x 版本比 10.8.3 版舊。此更新版本包含下列元件的多項安全性相關修正：

  - Apache
  - CoreTypes
  - International Components for Unicode
  - Identity Services
  - ImageIO
  - IOAcceleratorFamily
  - Kernel
  - Login Window
  - Messages
  - PDFKit
  - QuickTime
  - Security

請注意，更新亦會執行惡意程式碼移除工具，移除多數常見的惡意程式碼變體。

According to its banner, the remote Apple iOS device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - Kernel extension API responses containing an 'OSBundleMachOHeaders' key may include kernel addresses which can aid in further attacks. (CVE-2012-3749)
 - The lock screen can provide 'Passbook' data to an attacker having physical device access but not a passcode. (CVE-2012-3750)
 - A 'time-of-check-to-time-of-use' issue in the handling of JavaScript array data within WebKit could lead to arbitrary, remote code execution. (CVE-2012-3748)
 - A use-after-free issue in the handling of SVG images in WebKit could lead to arbitrary, remote code execution. (CVE-2012-5112)

The remote host is running a version of Mac OS X 10.8 that is older than version 10.8.3. The newer version contains numerous security-related fixes :

  - A canonicalization issue existed in the handling of URIs with ignorable Unicode character sequences. This issue was addressed by updating mod_hfs_apple to forbid access to URIs with ignorable Unicode character sequences. (CVE-2013-0966)
  - Java Web Start applications would run even if the Java plug-in was disabled. This issue was addressed by removing JNLP files from the CoreTypes safe file type list, so the Web Start application will not be run unless the user opens it in the Downloads directory. (CVE-2013-0967)
  - A canonicalization issue existed in the handling of the EUC-JP encoding, which could lead to a cross-site scripting attack on EUC-JP encoded websites. This issue was addressed by updating the EUC-JP mapping table. (CVE-2011-3058)
  - An error handling issue existed in Identity Services. If the user's AppleID certificate failed to validate, the user's AppleID was assumed to be the empty string. If multiple systems belonging to different users enter this state, applications relying on this identity determination may erroneously extend trust. This issue was addressed by ensuring that NULL is returned instead of an empty string. (CVE-2013-0963)
  - Description: A buffer overflow existed in libtiff's handling of TIFF images. This issue was addressed through additional validation of TIFF images. (CVE-2012-2088)
  - A memory corruption issue existed in the handling of graphics data. This issue was addressed through improved bounds checking.(CVE-2013-0976)
  - An information disclosure issue existed in the handling of APIs related to kernel extensions. Responses containing an OSBundleMachOHeaders key may have included kernel addresses, which may aid in bypassing address space layout randomization protection. (CVE-2012-3749)
  - A logic error existed in VoiceOver's handling of the Login Window, whereby an attacker with access to the keyboard could launch System Preferences and modify the system configuration. This issue was addressed by preventing VoiceOver from launching applications at the Login Window. (CVE-2013-0969)
  - Clicking on a specifically-formatted FaceTime:// URL in Messages could bypass the standard confirmation prompt. This issue was addressed by additional validation of FaceTime:// URLs. (CVE-2013-0970)
  - An issue existed in the Jabber server's handling of dialback result messages. An attacker may cause the Jabber server to disclose information intended for users of federated servers. This issue was addressed through improved handling of dialback result messages. (CVE-2012-3525)
  - Description: A use after free issue existed in the handling of ink annotations in PDF files. This issue was addressed through improved memory management. (CVE-2013-0971)
  - A type casting issue existed in Ruby on Rails' handling of XML parameters. This issue was addressed by disabling XML parameters in the Rails implementation used by Podcast Producer Server. (CVE-2013-0156)
  - A buffer overflow existed in the handling of 'rnet' boxes in MP4 files. This issue was addressed through improved bounds checking. (CVE-2012-3756)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
62803	Apple iOS < 6.0.1 Multiple Vulnerabilities	Nessus	Mobile Devices	2012/11/2	2024/5/20	critical
65577	Mac OS X 10.8.x < 10.8.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2013/3/15	2024/5/28	high
62803	Apple iOS < 6.0.1の複数の脆弱性	Nessus	Mobile Devices	2012/11/2	2024/5/20	critical
62803	Apple iOS < 6.0.1 多個弱點	Nessus	Mobile Devices	2012/11/2	2024/5/20	critical
65577	Mac OS X 10.8.x < 10.8.3 の複数の脆弱性	Nessus	MacOS X Local Security Checks	2013/3/15	2024/5/28	high
62803	Apple iOS < 6.0.1 多个漏洞	Nessus	Mobile Devices	2012/11/2	2024/5/20	critical
65577	Mac OS X 10.8.x < 10.8.3 多种漏洞	Nessus	MacOS X Local Security Checks	2013/3/15	2024/5/28	high
65577	Mac OS X 10.8.x < 10.8.3 多個弱點	Nessus	MacOS X Local Security Checks	2013/3/15	2024/5/28	high
6615	Apple iOS < 6.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2012/11/6	2019/3/6	high
6717	Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)	Nessus Network Monitor	Web Clients	2013/3/16	2019/3/6	high
801018	Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)	Log Correlation Engine	Operating System Detection	2013/3/16		high

検出

プラグインの検索

critical

high

critical

critical

high

critical

high

high

high

high

high