Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.ITUNES_10_7.NASL
HistorySep 13, 2012 - 12:00 a.m.

Apple iTunes < 10.7 Multiple Vulnerabilities (credentialed check)

2012-09-1300:00:00
This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
22
JSON

The version of Apple iTunes installed on the remote Windows host is older than 10.7 and is, therefore, affected by multiple memory corruption vulnerabilities in WebKit.

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(62077);
  script_version("1.15");
  script_cvs_date("Date: 2019/12/04");

  script_cve_id(
    "CVE-2011-3016",
    "CVE-2011-3021",
    "CVE-2011-3027",
    "CVE-2011-3032",
    "CVE-2011-3034",
    "CVE-2011-3035",
    "CVE-2011-3036",
    "CVE-2011-3037",
    "CVE-2011-3038",
    "CVE-2011-3039",
    "CVE-2011-3040",
    "CVE-2011-3041",
    "CVE-2011-3042",
    "CVE-2011-3043",
    "CVE-2011-3044",
    "CVE-2011-3050",
    "CVE-2011-3053",
    "CVE-2011-3059",
    "CVE-2011-3060",
    "CVE-2011-3064",
    "CVE-2011-3068",
    "CVE-2011-3069",
    "CVE-2011-3071",
    "CVE-2011-3073",
    "CVE-2011-3074",
    "CVE-2011-3075",
    "CVE-2011-3076",
    "CVE-2011-3078",
    "CVE-2011-3081",
    "CVE-2011-3086",
    "CVE-2011-3089",
    "CVE-2011-3090",
    "CVE-2011-3105",
    "CVE-2011-3913",
    "CVE-2011-3924",
    "CVE-2011-3926",
    "CVE-2011-3958",
    "CVE-2011-3966",
    "CVE-2011-3968",
    "CVE-2011-3969",
    "CVE-2011-3971",
    "CVE-2012-0682",
    "CVE-2012-0683",
    "CVE-2012-1520",
    "CVE-2012-1521",
    "CVE-2012-2817",
    "CVE-2012-2818",
    "CVE-2012-2829",
    "CVE-2012-2831",
    "CVE-2012-2842",
    "CVE-2012-2843",
    "CVE-2012-3589",
    "CVE-2012-3590",
    "CVE-2012-3591",
    "CVE-2012-3592",
    "CVE-2012-3593",
    "CVE-2012-3594",
    "CVE-2012-3595",
    "CVE-2012-3596",
    "CVE-2012-3597",
    "CVE-2012-3598",
    "CVE-2012-3599",
    "CVE-2012-3600",
    "CVE-2012-3601",
    "CVE-2012-3602",
    "CVE-2012-3603",
    "CVE-2012-3604",
    "CVE-2012-3605",
    "CVE-2012-3606",
    "CVE-2012-3607",
    "CVE-2012-3608",
    "CVE-2012-3609",
    "CVE-2012-3610",
    "CVE-2012-3611",
    "CVE-2012-3612",
    "CVE-2012-3613",
    "CVE-2012-3614",
    "CVE-2012-3615",
    "CVE-2012-3616",
    "CVE-2012-3617",
    "CVE-2012-3618",
    "CVE-2012-3620",
    "CVE-2012-3621",
    "CVE-2012-3622",
    "CVE-2012-3623",
    "CVE-2012-3624",
    "CVE-2012-3625",
    "CVE-2012-3626",
    "CVE-2012-3627",
    "CVE-2012-3628",
    "CVE-2012-3629",
    "CVE-2012-3630",
    "CVE-2012-3631",
    "CVE-2012-3632",
    "CVE-2012-3633",
    "CVE-2012-3634",
    "CVE-2012-3635",
    "CVE-2012-3636",
    "CVE-2012-3637",
    "CVE-2012-3638",
    "CVE-2012-3639",
    "CVE-2012-3640",
    "CVE-2012-3641",
    "CVE-2012-3642",
    "CVE-2012-3643",
    "CVE-2012-3644",
    "CVE-2012-3645",
    "CVE-2012-3646",
    "CVE-2012-3647",
    "CVE-2012-3648",
    "CVE-2012-3649",
    "CVE-2012-3651",
    "CVE-2012-3652",
    "CVE-2012-3653",
    "CVE-2012-3654",
    "CVE-2012-3655",
    "CVE-2012-3656",
    "CVE-2012-3657",
    "CVE-2012-3658",
    "CVE-2012-3659",
    "CVE-2012-3660",
    "CVE-2012-3661",
    "CVE-2012-3663",
    "CVE-2012-3664",
    "CVE-2012-3665",
    "CVE-2012-3666",
    "CVE-2012-3667",
    "CVE-2012-3668",
    "CVE-2012-3669",
    "CVE-2012-3670",
    "CVE-2012-3671",
    "CVE-2012-3672",
    "CVE-2012-3673",
    "CVE-2012-3674",
    "CVE-2012-3675",
    "CVE-2012-3676",
    "CVE-2012-3677",
    "CVE-2012-3678",
    "CVE-2012-3679",
    "CVE-2012-3680",
    "CVE-2012-3681",
    "CVE-2012-3682",
    "CVE-2012-3683",
    "CVE-2012-3684",
    "CVE-2012-3685",
    "CVE-2012-3686",
    "CVE-2012-3687",
    "CVE-2012-3688",
    "CVE-2012-3692",
    "CVE-2012-3699",
    "CVE-2012-3700",
    "CVE-2012-3701",
    "CVE-2012-3702",
    "CVE-2012-3703",
    "CVE-2012-3704",
    "CVE-2012-3705",
    "CVE-2012-3706",
    "CVE-2012-3707",
    "CVE-2012-3708",
    "CVE-2012-3709",
    "CVE-2012-3710",
    "CVE-2012-3711",
    "CVE-2012-3712"
  );
  script_bugtraq_id(
    51041,
    51641,
    51911,
    52031,
    52271,
    52674,
    52762,
    52913,
    53309,
    53540,
    54203,
    54680,
    55534,
    57027
  );

  script_name(english:"Apple iTunes < 10.7 Multiple Vulnerabilities (credentialed check)");
  script_summary(english:"Checks version of iTunes on Windows");

  script_set_attribute(attribute:"synopsis", value:
"The remote host contains a multimedia application that has multiple
vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Apple iTunes installed on the remote Windows host is
older than 10.7 and is, therefore, affected by multiple memory
corruption vulnerabilities in WebKit.");
  script_set_attribute(attribute:"see_also", value:"https://support.apple.com/en-us/HT202598");
  script_set_attribute(attribute:"see_also", value:"https://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Apple iTunes 10.7 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2012-1521");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploited_by_malware", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2012/09/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2012/09/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2012/09/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:apple:itunes");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("itunes_detect.nasl");
  script_require_keys("SMB/iTunes/Version");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");


version = get_kb_item_or_exit("SMB/iTunes/Version");
path = get_kb_item_or_exit("SMB/iTunes/Path");

fixed_version = "10.7.0.21";
if (ver_compare(ver:version, fix:fixed_version) == -1)
{
  port = get_kb_item("SMB/transport");
  if (!port) port = 445;

  if (report_verbosity > 0)
  {
    report =
      '\n  Path              : '+path+
      '\n  Installed version : '+version+
      '\n  Fixed version     : '+fixed_version+'\n';
    security_hole(port:port, extra:report);
  }
  else security_hole(port);
}
else audit(AUDIT_INST_PATH_NOT_VULN, "iTunes", version, path);
VendorProductVersionCPE
appleitunescpe:/a:apple:itunes

References

Related

nessus 41
openvas 75
securityvulns 5
ubuntu 2
kaspersky 1
threatpost 7
chrome 5
freebsd 5
seebug 2
suse 2
gentoo 6
debiancve 8
ubuntucve 12
cve 12
prion 15
checkpoint_advisories 1
nessus
nessus
Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)
2012-09-13 00:00:00
Safari < 6.0.1 Multiple Vulnerabilities
2012-09-20 00:00:00
Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities
2012-09-20 00:00:00
openvas
openvas
Apple iTunes Multiple Vulnerabilities (Sep 2012) - Windows
2012-09-17 00:00:00
Apple iTunes Multiple Vulnerabilities - Sep 12 (Windows)
2012-09-17 00:00:00
Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X)
2012-10-01 00:00:00
securityvulns
securityvulns
APPLE-SA-2012-09-19-3 Safari 6.0.1
2012-09-24 00:00:00
Apple Safari / WebKit / Google Chrome multiple security vulnerabilities
2012-09-24 00:00:00
APPLE-SA-2012-09-19-1 iOS 6
2012-09-24 00:00:00
ubuntu
ubuntu
WebKit vulnerabilities
2012-10-25 00:00:00
WebKit vulnerabilities
2012-08-08 00:00:00
kaspersky
kaspersky
KLA10075 Multiple vulnerabilities in Apple Safari
2012-07-25 00:00:00
threatpost
threatpost
Google Patches 14 Chrome Bugs Ahead of Pwn2Own, Pays $30k in Special Rewards
2012-03-05 13:01:22
Google Patches 12 Flaws in Chrome
2012-04-05 18:42:41
Google Fixes Five Bugs in Chrome 18
2012-05-02 11:27:02
chrome
chrome
Chrome Stable Update
2012-03-04 00:00:00
Stable and Beta Channel Updates
2012-04-05 00:00:00
Stable Channel Update
2012-04-30 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-03-04 00:00:00
chromium -- multiple vulnerabilities
2012-04-05 00:00:00
chromium -- multiple vulnerabilities
2012-04-30 00:00:00
seebug
seebug
Google Chrome 17.0.963.65之前版本存在多个安全漏洞
2012-03-06 00:00:00
Google Chrome 18.0.1025.142之前版本多个内存破坏漏洞
2012-03-29 00:00:00
suse
suse
update for chromium, v8 (important)
2012-03-16 13:08:23
update for chromium, v8 (important)
2012-08-15 16:09:13
gentoo
gentoo
Chromium: Multiple vulnerabilities
2012-03-25 00:00:00
Chromium: Multiple vulnerabilities
2012-05-15 00:00:00
Chromium: Multiple vulnerabilities
2012-04-10 00:00:00
debiancve
debiancve
CVE-2011-3078
2012-05-01 10:12:00
CVE-2011-3081
2012-05-01 10:12:00
CVE-2011-3926
2012-01-24 04:03:00
ubuntucve
ubuntucve
CVE-2011-3081
2012-05-01 00:00:00
CVE-2011-3078
2012-05-01 00:00:00
CVE-2011-3926
2012-01-24 00:00:00
cve
cve
CVE-2011-3081
2012-05-01 10:12:00
CVE-2011-3078
2012-05-01 10:12:00
CVE-2011-3926
2012-01-24 04:03:00
prion
prion
Design/Logic Flaw
2012-05-01 10:12:00
Design/Logic Flaw
2012-05-01 10:12:00
Memory corruption
2012-09-13 10:30:00
checkpoint_advisories
checkpoint_advisories
Apple Safari WebKit CSS Title Memory Corruption (CVE-2012-3684)
2012-11-18 00:00:00
JSON
Related for ITUNES_10_7.NASL
nessus41openvas75securityvulns5ubuntu2kaspersky1threatpost7chrome5freebsd5seebug2suse2gentoo6debiancve8ubuntucve12cve12prion15checkpoint_advisories1