遠端主機受到 GLSA-201408-16 中所述的弱點影響 (Chromium：多個弱點)

在 Chromium 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可能發動數個攻擊，其中包括：跨網站指令碼攻擊、繞過沙箱保護、可能使用處理程序權限來執行任意程式碼，或者造成拒絕服務情形。
 因應措施：

目前尚無已知的因應措施。

遠端 Windows 主機上安裝的 Apple iTunes 版本早於 12.0.1。因此，會受到因隨附 WebKit 版本而導致的多個弱點影響。這些錯誤可能導致應用程式損毀或任意程式碼執行。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Versions of iTunes earlier than 12.0.1 are missing updates that patch memory corruption vulnerabilities within WebKit, as well as a patch that fixes a man-in-the-middle vulnerability that affects encrypted connections to the iTunes Store via iTunes. The most severe of these vulnerabilites can result in arbitrary remote code execution or unexpected application termination.

According to its banner, the remote iOS device is missing a security update.  Versions of Apple iOS 7.x prior to 7.1.2 are affected by vulnerabilities within the following components :

  - Certificate Trust Policy
  - CoreGraphics
  - Kernel
  - launchd
  - Lock Screen
  - Lockdown
  - Mail
  - Safari
  - Secure Transport
  - Settings
  - Siri
  - WebKit

The remote host has Safari installed that is older than 6.1.4 or 7.0.4, and is thus unpatched for the following WebKit vulnerabilities :

 - Multiple memory corruption issues within WebKit, which were addressed through improved memory handling (CVE-2013-2875, CVE-2013-2927, CVE-2014-1323, CVE-2014-1324, CVE-2014-1326, CVE-2014-1327, CVE-2014-1329, CVE-2014-1330, CVE-2014-1331, CVE-2014-1333, CVE-2014-1334, CVE-2014-1335, CVE-2014-1336, CVE-2014-1337, CVE-2014-1338, CVE-2014-1339, CVE-2014-1341, CVE-2014-1342, CVE-2014-1343, CVE-2014-1344, CVE-2014-1731)
 - An issue with the way unicode characters in the URL are handled could result in bypassing the browser's origin check (CVE-2014-1346)

The following vulnerabilities have since been patched in version 6.1.2 :

  - iTunes store transaction may be completed without providing a valid password when prompted (CVE-2014-1383)
  - WebKit memory corruption vulnerabilities (CVE-2013-2875, CVE-2013-2927, CVE-2014-1323, CVE-2014-1325, CVE-2014-1326, CVE-2014-1327, CVE-2014-1329, CVE-2014-1330, CVE-2014-1331, CVE-2014-1333, CVE-2014-1334, CVE-2014-1335, CVE-2014-1336, CVE-2014-1337, CVE-2014-1338, CVE-2014-1339, CVE-2014-1341, CVE-2014-1342, CVE-2014-1343, CVE-2014-1362, CVE-2014-1363, CVE-2014-1364, CVE-2014-1365, CVE-2014-1366, CVE-2014-1367, CVE-2014-1368, CVE-2014-1382, CVE-2014-1731)
  - Various memory issues, inadequate bounds-checking, and null pointer derferencing issues that could potentially result in arbitrary code execution, with system privileges (CVE-2014-1355, CVE-2014-1356, CVE-2014-1357, CVE-2014-1358, CVE-2014-1359, CVE-2014-1361)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
77460	GLSA-201408-16：Chromium：多個弱點	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	critical
78597	Apple iTunes < 12.0.1 多個弱點 (經認證的檢查)	Nessus	Windows	2014/10/21	2018/11/15	critical
8561	iTunes < 12.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/10/20	2019/3/6	critical
8322	Apple iOS 7.x < 7.1.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2014/7/2	2019/3/6	high
8264	Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/5/23	2019/3/6	medium
8323	Apple TV < 6.1.2 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	2014/7/6	2019/3/6	critical

检测

插件搜索

critical

critical

critical

high

medium

critical