The mobile device is running a version of iOS prior to version 8.3.
It is, therefore, affected by vulnerabilities in the following components :

  - AppleKeyStore
  - Audio Drivers
  - Backup
  - Certificate Trust Policy
  - CFNetwork
  - CFNetwork Session
  - CFURL
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOMobileFramebuffer
  - iWork Viewer
  - Kernel
  - Keyboards
  - libnetcore
  - Lock Screen
  - NetworkExtension
  - Podcasts
  - Safari
  - Sandbox Profiles
  - Telephony
  - UIKit View
  - WebKit

远程主机运行的 Mac OS X 10.10.x 版低于 10.10.3。因此，它受到以下组件中多种漏洞的影响：

- Admin Framework
 - Apache
 - ATS
 - Certificate Trust Policy
 - CFNetwork HTTPProtocol
 - CFNetwork Session
 - CFURL
 - CoreAnimation
 - FontParser
 - Graphics Driver
 - Hypervisor
 - ImageIO
 - IOHIDFamily
 - Kernel
 - LaunchServices
 - libnetcore
 - ntp
 - Open Directory Client
 - OpenLDAP
 - OpenSSL
 - PHP
 - QuickLook
 - SceneKit
 - ScreenSharing
 - Security - Code SIgning
 - UniformTypeIdentifiers
 - WebKit

请注意，如果成功利用最严重的问题则可能导致执行任意代码。

リモートホストが、バージョン 10.10.3 より前の Mac OS X 10.10.x を実行しています。したがって、次のコンポーネントで複数の脆弱性による影響を受けます：

- Admin Framework
 - Apache
 - ATS
 - Certificate Trust Policy
 - CFNetwork HTTPProtocol
 - CFNetwork Session
 - CFURL
 - CoreAnimation
 - FontParser
 - Graphics Driver
 - Hypervisor
 - ImageIO
 - IOHIDFamily
 - Kernel
 - LaunchServices
 - libnetcore
 - ntp
 - Open Directory Client
 - OpenLDAP
 - OpenSSL
 - PHP
 - QuickLook
 - SceneKit
 - ScreenSharing
 - Security - Code SIgning
 - UniformTypeIdentifiers
 - WebKit

注意：最も深刻な問題の悪用が成功すると、任意のコード実行が発生する可能性があります。

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components :

  - Admin Framework
  - Apache
  - ATS
  - Certificate Trust Policy
  - CFNetwork HTTPProtocol
  - CFNetwork Session
  - CFURL
  - CoreAnimation
  - FontParser
  - Graphics Driver
  - Hypervisor
  - ImageIO
  - IOHIDFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - ntp
  - Open Directory Client
  - OpenLDAP
  - OpenSSL
  - PHP
  - QuickLook
  - SceneKit
  - ScreenSharing
  - Security - Code SIgning
  - UniformTypeIdentifiers
  - WebKit

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

モバイルデバイスは、8.3 より前のバージョンの iOS を実行しています。
したがって、次のコンポーネントの脆弱性による影響を受けます：

  - AppleKeyStore
  - オーディオドライバー
  - バックアップ
  - 証明書信頼ポリシー
  - CFNetwork
  - CFNetworkセッション
  - CFURL
  -  FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOMobileFramebuffer
  - iWork Viewer
  - Kernel
  - キーボード
  - libnetcore
  - ロック画面
  - NetworkExtension
  - ポッドキャスト
  - Safari
  - サンドボックスプロファイル
  - Telephony
  - UIKit View
  - WebKit

行動裝置執行的 iOS 版本比 8.3 舊。
因此受到下列元件中的弱點影響：

  - AppleKeyStore
  - 音訊驅動程式
  - 備份
  - 憑證信任原則
  - CFNetwork
  - CFNetwork Session
  - CFURL
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOMobileFramebuffer
  - iWork Viewer
  - Kernel
  - 鍵盤
  - libnetcore
  - 鎖定畫面
  - NetworkExtension
  - Podcasts
  - Safari
  - Sandbox Profiles
  - Telephony
  - UIKit View
  - WebKit

移动设备上正在运行的 iOS 版本低于 8.3。
因此，它受到以下组件中的漏洞的影响：

  - AppleKeyStore
  - 音频驱动程序
  - 备份
  - 证书信任策略
  - CFNetwork
  - CFNetwork 会话
  - CFURL
  - FontParser
  - Foundation
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOMobileFramebuffer
  - iWork 显示程序
  - 内核
  - 键盘
  - libnetcore
  - 锁定屏幕
  - NetworkExtension
  - 播客
  - Safari
  - 沙箱描述文件
  - 电话
  - UIKit 视图
  - WebKit

遠端主機執行的 Mac OS X 10.10.x 版本比 10.10.3 版舊。因此，其會受到下列元件中的多個弱點影響：

- Admin Framework
 - Apache
 - ATS
 - Certificate Trust Policy
 - CFNetwork HTTPProtocol
 - CFNetwork Session
 - CFURL
 - CoreAnimation
 - FontParser
 - Graphics Driver
 - Hypervisor
 - ImageIO
 - IOHIDFamily
 - Kernel
 - LaunchServices
 - libnetcore
 - ntp
 - Open Directory Client
 - OpenLDAP
 - OpenSSL
 - PHP
 - QuickLook
 - SceneKit
 - ScreenSharing
 - Security - Code SIgning
 - UniformTypeIdentifiers
 - WebKit

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Admin Framework
 - Apache
 - ATS
 - Certificate Trust Policy
 - CFNetwork HTTPProtocol
 - CFNetwork Session
 - CFURL
 - CoreAnimation
 - FontParser
 - Graphics Driver
 - Hypervisor
 - ImageIO
 - IOHIDFamily
 - Kernel
 - LaunchServices
 - libnetcore
 - ntp
 - Open Directory Client
 - OpenLDAP
 - OpenSSL
 - PHP
 - QuickLook
 - SceneKit
 - ScreenSharing
 - Security - Code SIgning
 - UniformTypeIdentifiers
 - WebKit

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

According to its banner, the remote Apple iOS device is missing a security update.  It is, therefore, affected by the following vulnerabilities :

 - The IOHIDFamily allows attackers within physical proximity to execute a Denial of Service attack within a kernel context. (CVE-2015-1095)
 - The 'Podcasts' component allows remote attackers to discover unique identifiers by reading an asset-download request data. (CVE-2015-1110)
 - The CFNetwork component does not properly handle cookies which may allow an attacker to bypass Same Origin Policy. (CVE-2015-1089)
 - The Audio Drivers subsystem does not properly validate IOKit object metadata which allows an attacker to execute arbitrary code. (CVE-2015-1086)

The version of Mac OS X is 10.10.x prior to version 10.10.3, and is affected by the following vulnerabilities :

 - There is an off-by-one error in the IOAcceleratorFamily component which would allow an attacker to execute arbitrary code. (CVE-2015-1066)
 - There is a flaw in the way that the IOSurface component handles "type confusion" which would allow a remote attacker to execute arbitrary code as a privileged user. (CVE-2015-1061)
 - There is a flaw in iCloud Keychain which would allow a man-in-the-middle attacker to execute arbitrary code. (CVE-2015-1065)
 - The Secure Transport component allows remote attackers to downgrade the encryption cipher. (CVE-2015-1067) 
 - The IOHIDFamily allows attackers within physical proximity to execute a Denial of Service attack within a kernel context. (CVE-2015-1095)
 - The CFNetwork component does not properly handle cookies which may allow an attacker to bypass Same Origin Policy. (CVE-2015-1089)
 - The 'fontd' daemon may allow remote code execution. (CVE-2015-1135)
 - A NULL pointer dereference flaw in 'Secure Transport' is triggered during the handling of a maliciously crafted X.509 certificate. This may allow a remote attacker to terminate arbitrary applications. (CVE-2015-1160)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
82703	Apple iOS < 8.3 Multiple Vulnerabilities	Nessus	Mobile Devices	2015/4/10	2024/5/20	high
82699	Mac OS X 10.10.x < 10.10.3 多种漏洞 (FREAK)	Nessus	MacOS X Local Security Checks	2015/4/10	2022/2/11	critical
82699	Mac OS X 10.10.x < 10.10.3 複数の脆弱性（FREAK）	Nessus	MacOS X Local Security Checks	2015/4/10	2022/2/11	critical
82699	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)	Nessus	MacOS X Local Security Checks	2015/4/10	2022/2/11	critical
82703	Apple iOS < 8.3の複数の脆弱性	Nessus	Mobile Devices	2015/4/10	2024/5/20	high
82703	Apple iOS < 8.3 多個弱點	Nessus	Mobile Devices	2015/4/10	2024/5/20	high
82703	Apple iOS < 8.3 多个漏洞	Nessus	Mobile Devices	2015/4/10	2024/5/20	high
82699	Mac OS X 10.10.x < 10.10.3 多個弱點 (FREAK)	Nessus	MacOS X Local Security Checks	2015/4/10	2022/2/11	critical
700510	Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2019/4/10	2019/4/10	critical
8803	Apple iOS < 8.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/7/10	2019/3/6	high
8672	Mac OS X < 10.10.3 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2015/4/5	2019/3/6	critical

検出

プラグインの検索

high

critical

critical

critical

high

high

high

critical

critical

high

critical