According to its banner, the remote Apple iOS device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - Apple iOS is bundled with Apple WebKit.  Apple WebKit is affected by several vulnerabilities which would allow a remote attacker to execute arbitrary code or crash the application. (CVE-2014-4476, CVE-2014-4477, CVE-2014-4479, CVE-2014-4459, CVE-2014-4467)
 - There is a directory-traversal flaw in the 'afc' component which can allow an attacker to access unintended files. (CVE-2014-4480)
 - There is a flaw in the 'mach_port_kobject' kernel interface which can allow an attacker to bypass the ASLR protection mechanism. (CVE-2014-4491, CVE-2014-4496)
 - The 'iTunes Store' component allows attackers to bypass Safari sandbox protection mechanisms. (CVE-2014-8840)
 - The app-installation functionality in 'MobileInstallation' is vulnerable to a flaw which would allow attackers to gain control of the local app container. (CVE-2014-4493)
 - The 'Springboard' module is vulnerable to a signature-bypass vulnerability. (CVE-2014-4494)
 - There is an integer overflow in CoreGraphics which allows remote code execution. (CVE-2014-4481)
 - There is a buffer overflow in FontParser which allows remote code execution. (CVE-2014-4483)
 - There is a flaw in the way that FontParser handles crafted .dfont files which leads to remote code execution. (CVE-2014-4484)
 - There is a buffer overflow in the XML parser in the Foundation component. (CVE-2014-4485)
 - The IOAcceleratorFamily does not properly handle certain data types which can lead to a NULL pointer dereference. (CVE-2014-4486)
 - There is a buffer overflow in the IOHIDFamily component. (CVE-2014-4487)
 - The IOHIDFamily component does not properly validate resource-queue metadata, allowing remote code execution. (CVE-2014-4488)
 - The IOHIDFamily component fails to properly sanitize event queues.  This can lead to remote code execution. (CVE-2014-4489)
 - The kernel does not enforce read-only attributes which can allow attackers to bypass access restrictions. (CVE-2014-4495)
 - The libnetcore component fails to verify certain data types which can allow remote code execution in the _networkd context. (CVE-2014-4492)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 8.1.3之前的 Apple iOS 中所使用的 WebKit在轉譯 FRAME 元素期間未正確判斷捲軸邊界進而允許遠端攻擊者透過特製的網站偽造 UI。
    (CVE-2014-4467)

請注意，Nessus 依賴供應商報告的套件存在。

移动设备上正在运行的 iOS 版本低于 8.1.3。
因此，它受到以下组件中的漏洞的影响：

  - AppleFileConduit
  - CoreGraphics
  - dyld
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - iTunes Store
  - 内核
  - libnetcore
  - MobileInstallation
  - Springboard
  - WebKit

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 8.1.3之前的 Apple iOS 中使用的 WebKit 在渲染 FRAME 元素期间未正确确定滚动条边界从而允许远程攻击者通过构建的网站伪造 UI。
    (CVE-2014-4467)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

行動裝置執行的 iOS 版本比 8.1.3 舊。
因此受到下列元件中的弱點影響：

  - AppleFileConduit
  - CoreGraphics
  - dyld
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - iTunes Store
  - Kernel
  - libnetcore
  - MobileInstallation
  - Springboard
  - WebKit

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 8.1.3より前の Apple iOS で使用されている WebKit は、FRAME 要素のレンダリング中にスクロールバー境界を適切に判断しません。これにより、リモートの攻撃者が、細工された Web サイトを通じて UI を偽装することが可能です。
    (CVE-2014-4467)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

モバイルデバイスは、8.1.3 より前のバージョンの iOS を実行しています。
したがって、次のコンポーネントの脆弱性による影響を受けます：

  - AppleFileConduit
  - CoreGraphics
  - dyld
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - iTunes Store
  - Kernel
  - libnetcore
  - MobileInstallation
  - スプリングボード
  - WebKit

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the     rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.
    (CVE-2014-4467)

Note that Nessus relies on the presence of the package as reported by the vendor.

The mobile device is running a version of iOS prior to version 8.1.3.
It is, therefore, affected by vulnerabilities in the following components :

  - AppleFileConduit
  - CoreGraphics
  - dyld
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - iTunes Store
  - Kernel
  - libnetcore
  - MobileInstallation
  - Springboard
  - WebKit

ID	名前	製品	ファミリー	公開日	更新日	深刻度
8639	Apple iOS < 8.1.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/3/4	2019/3/6	critical
264154	Linux Distros 未修補的弱點：CVE-2014-4467	Nessus	Misc.	2025/9/10	2025/9/10	medium
81050	Apple iOS < 8.1.3 多个漏洞	Nessus	Mobile Devices	2015/1/28	2026/8/10	critical
264154	Linux Distros 未修补的漏洞：CVE-2014-4467	Nessus	Misc.	2025/9/10	2025/9/10	medium
81050	Apple iOS < 8.1.3 多個弱點	Nessus	Mobile Devices	2015/1/28	2026/8/10	critical
264154	Linux Distros のパッチ未適用の脆弱性: CVE-2014-4467	Nessus	Misc.	2025/9/10	2025/9/10	medium
81050	Apple iOS < 8.1.3の複数の脆弱性	Nessus	Mobile Devices	2015/1/28	2026/8/10	critical
264154	Linux Distros Unpatched Vulnerability : CVE-2014-4467	Nessus	Misc.	2025/9/10	2025/9/10	medium
81050	Apple iOS < 8.1.3 Multiple Vulnerabilities	Nessus	Mobile Devices	2015/1/28	2026/8/10	critical

検出

プラグインの検索

critical

medium

critical

medium

critical

medium

critical

medium

critical