Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable700118.PRM
HistoryMay 18, 2017 - 12:00 a.m.

Apple TV < 10.2.1 Multiple Vulnerabilities

2017-05-1800:00:00
Tenable
www.tenable.com
12
JSON

Versions of Apple TV earlier than 10.2.1 are affected by multiple vulnerabilities :

  • A flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
  • A use-after-free error exists in the handling of RenderLayer objects. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
  • A logic flaw exists that allows a universal cross-site scripting (UXSS) attack. The issue is triggered when handling WebKit Editor commands. This may allow a context-dependent attacker to create a specially crafted web page that will execute arbitrary script code in a user’s browser session within the trust relationship between their browser and any website.

This product is also affected by vulnerabilities found in the following components:

  • AVEVideoEncoder
  • CoreAudio
  • CoreFoundation
  • Foundation
  • IOSurface
  • Kernel
  • SQLite
  • TextInput
  • WebKit
  • Web Inspector
Binary data 700118.prm
VendorProductVersionCPE
appleapple_tvcpe:/a:apple:apple_tv

References

JSON