The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.2. This update contains several security-related fixes for the following components :

  - Apache
  - ATS
  - Certificate Trust Policy
  - CoreAnimation
  - CoreText
  - curl
  - Data Security
  - Date and Time
  - File Bookmark
  - Finder
  - ImageIO
  - NVIDIA Drivers
  - PHP
  - QuickLook
  - QuickTime

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

The version of QuickTime installed on the remote Windows host is earlier than 7.7.5.  It is, therefore, reportedly affected by the following vulnerabilities :

  - Out-of-bounds byte swapping issues exist in the     handling of QuickTime image descriptions and 'ttfo'     elements. (CVE-2013-1032, CVE-2014-1250)

  - An uninitialized pointer issue exists in the handling of     track lists.  (CVE-2014-1243)

  - Buffer overflow vulnerabilities exist in the handling of     H.264 encoded movie files, 'ftab' atoms, 'ldat' atoms,     PSD images, and 'clef' atoms. (CVE-2014-1244,     CVE-2014-1248, CVE-2014-1249, CVE-2014-1251)

  - A signedness issue exists in the handling of 'stsz'     atoms. (CVE-2014-1245)

  - A memory corruption issue exists in the handling of     'dref' atoms. (CVE-2014-1247)

Successful exploitation of these issues could result in program termination or arbitrary code execution, subject to the user's privileges.

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-001 applied. This update contains several security-related fixes for the following components :

  - Apache
  - App Sandbox
  - ATS
  - Certificate Trust Policy
  - CFNetwork Cookies
  - CoreAnimation
  - Date and Time
  - File Bookmark
  - ImageIO
  - IOSerialFamily
  - LaunchServices
  - NVIDIA Drivers
  - PHP
  - QuickLook
  - QuickTime
  - Secure Transport

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

リモート Windows ホストにインストールされている QuickTime のバージョンは 7.7.5 より前です。そのため、以下の脆弱性の影響を受ける可能性があります：

  - QuickTimeの画像の説明および｢ttfo｣要素の処理に、領域外のバイトのスワッピングの問題が存在します。（CVE-2013-1032、CVE-2014-1250）

  - 追跡リストの処理に、初期化されていないポインターの問題が存在します。（CVE-2014-1243）

  - H.264エンコードされた動画ファイル、｢ftab｣アトム、｢ldat｣アトム、PSD画像、｢clef｣アトムの処理にバッファオーバーフローの脆弱性が存在します。（CVE-2014-1244、CVE-2014-1248、CVE-2014-1249、CVE-2014-1251）

  - ｢stsz｣アトムの処理に、符号の問題が存在します。（CVE-2014-1245）

  - ｢dref｣アトムの処理に、メモリ破損の問題が存在します。（CVE-2014-1247）

これらの問題の悪用が成功すると、プログラムが停止させられたり、ユーザーの権限に属している任意のコードが実行されたりします。

リモートホストは、セキュリティ更新 2014-001 が適用されていない Mac OS X 10.7 または 10.8 バージョンを実行しています。この更新には、次のコンポーネントの、セキュリティに関連するいくつかの修正が含まれています：

- Apache
 - App Sandbox
 - ATS
 - Certificate Trust Policy
 - CFNetwork Cookies
 - CoreAnimation
 - Date and Time
 - File Bookmark
 - ImageIO
 - IOSerialFamily
 - LaunchServices
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime
 - Secure Transport

注意：最も深刻な問題の悪用が成功すると、任意のコード実行が発生する可能性があります。

远程主机正在运行的 Mac OS X 10.7 或 10.8 版本未应用安全更新 2014-001。此更新包含若干针对以下组件的安全相关补丁：

- Apache
 - App Sandbox
 - ATS
 - Certificate Trust Policy
 - CFNetwork Cookies
 - CoreAnimation
 - Date and Time
 - File Bookmark
 - ImageIO
 - IOSerialFamily
 - LaunchServices
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime
 - Secure Transport

请注意，如果成功利用最严重的问题则可能导致执行任意代码。

遠端 Windows 主機上安裝的 QuickTime 版本比 7.7.5 舊。因此，據報會受到下列弱點影響：

  - 在 QuickTime 影像描述與「ttfo」元素的處理中，存在超出邊界位元組交換問題。(CVE-2013-1032、CVE-2014-1250)

  - 在追蹤清單的處理中，存在一個未初始化指標問題。(CVE-2014-1243)

  - 在 H.264 編碼之影片檔案、「ftab」atom、「ldat」atom、PSD 影像和「clef」atom 的處理中，存在緩衝區溢位弱點。(CVE-2014-1244、CVE-2014-1248、CVE-2014-1249、CVE-2014-1251)

  - 在「stsz」atom 的處理中，存在一個正負號問題。(CVE-2014-1245)

  - 在「dref」atom 的處理中，存在一個記憶體損毀問題。(CVE-2014-1247)

如果成功惡意利用這些問題，可導致程式終止或執行需要使用者權限的任意程式碼。

遠端主機執行的 Mac OS X 10.7 或 10.8 版本並未套用安全性更新 2014-001。此項更新包含下列元件的多項安全性相關修正：

- Apache
 - App Sandbox
 - ATS
 - Certificate Trust Policy
 - CFNetwork Cookies
 - CoreAnimation
 - Date and Time
 - File Bookmark
 - ImageIO
 - IOSerialFamily
 - LaunchServices
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime
 - Secure Transport

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

遠端主機執行的 Mac OS X 10.9.x 版本比 10.9.2 版舊。此項更新包含下列元件的多項安全性相關修正：

- Apache
 - ATS
 - Certificate Trust Policy
 - CoreAnimation
 - CoreText
 - curl
 - Data Security
 - Date and Time
 - File Bookmark
 - Finder
 - ImageIO
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

リモートホストが、バージョン 10.9.2 より前の Mac OS X 10.9.x を実行しています。この更新には、次のコンポーネントの、セキュリティに関連するいくつかの修正が含まれています：

- Apache
 - ATS
 - Certificate Trust Policy
 - CoreAnimation
 - CoreText
 - curl
 - Data Security
 - Date and Time
 - File Bookmark
 - Finder
 - ImageIO
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime

注意：最も深刻な問題の悪用が成功すると、任意のコード実行が発生する可能性があります。

远程 Windows 主机上安装的 QuickTime 版本低于 7.7.5。因此据报告，它受到以下漏洞的影响：

  - 在 QuickTime 图像描述和“ttfo”元素的处理中存在越界字节交换问题。（CVE-2013-1032、CVE-2014-1250）

  - 在跟踪列表的处理中存在未初始化指针问题。(CVE-2014-1243)

  - 在 H.264 编码的电影文件、“ftab”原子、“ldat”原子、PSD 图像和“clef”原子的处理中存在缓冲区溢出漏洞。（CVE-2014-1244、CVE-2014-1248、CVE-2014-1249、CVE-2014-1251）

  - 在“stsz”原子的处理中存在符号问题。(CVE-2014-1245)

  - 在“dref”原子的处理中存在内存损坏问题。(CVE-2014-1247)

成功利用这些问题可能导致程序终止或执行任意代码，具体受限于用户的权限。

远程主机正在运行的 Mac OS X 10.9.x 版本低于 10.9.2。此更新包含若干针对以下组件的安全相关补丁：

- Apache
 - ATS
 - Certificate Trust Policy
 - CoreAnimation
 - CoreText
 - curl
 - Data Security
 - Date and Time
 - File Bookmark
 - Finder
 - ImageIO
 - NVIDIA Drivers
 - PHP
 - QuickLook
 - QuickTime

请注意，如果成功利用最严重的问题则可能导致执行任意代码。

Versions older than Quicktime 7.7.5 contain the following vulnerabilities:

  - Multiple buffer overflow vulnerabilities, which can be leveraged by an attacker to execute arbitrary code or application termination (2014-1246, CVE-2014-1248, CVE-2014-1249)

  - An out-of-bounds byte swapping issue in the handling of 'ttfo' elements, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1250)

  - A signedness issue in the handling of 'stsz' atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1245)

  - A memory corruption issue when handling the 'dref' atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1247)

Versions older than Quicktime 7.7.5 contain the following vulnerabilities:

  - An uninitialized pointer issue when handling track lists, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1243)

  - Multiple buffer overflow vulnerabilities, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1244, 2014-1246, CVE-2014-1248, CVE-2014-1249, CVE-2014-1251)

  - Multiple out-of-bounds byte swapping issues, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1250, CVE-2013-1032)

  - A signedness issue in the handling of 'stsz' atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1245)

  - A memory corruption issue when handling the 'dref' atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1247)

The remote host is running a version of Mac OS X that is older than 10.9.2. The newer version contains numerous security-related fixes for the following components :

  - Apache

  - ATS

  - Certificate Trust Policy

  - CoreAnimation

  - CoreText

  - curl

  - Data Security

  - Date and Time

  - File Bookmark

  - Finder

  - ImageIO

  - NVIDIA Drivers

  - PHP

  - QuickLook

  - QuickTime

An attacker could leverage the most serious of these issues to execute arbitrary code.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
72687	Mac OS X 10.9.x < 10.9.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2014/2/25	2018/7/14	critical
72706	QuickTime < 7.7.5 Multiple Vulnerabilities (Windows)	Nessus	Windows	2014/2/26	2018/11/15	high
72688	Mac OS X Multiple Vulnerabilities (Security Update 2014-001) (BEAST)	Nessus	MacOS X Local Security Checks	2014/2/25	2022/12/5	critical
72706	7.7.5より前のQuickTimeの複数の脆弱性（Windows）	Nessus	Windows	2014/2/26	2018/11/15	high
72688	Mac OS X 複数の脆弱性（セキュリティ更新 2014-001）（BEAST）	Nessus	MacOS X Local Security Checks	2014/2/25	2022/12/5	critical
72688	Mac OS X 多种漏洞（安全更新 2014-001）(BEAST)	Nessus	MacOS X Local Security Checks	2014/2/25	2022/12/5	critical
72706	QuickTime < 7.7.5 多個弱點 (Windows)	Nessus	Windows	2014/2/26	2018/11/15	high
72688	Mac OS X 多個弱點 (安全性更新 2014-001) (BEAST)	Nessus	MacOS X Local Security Checks	2014/2/25	2022/12/5	critical
72687	Mac OS X 10.9.x < 10.9.2 多個弱點	Nessus	MacOS X Local Security Checks	2014/2/25	2018/7/14	critical
72687	Mac OS X 10.9.x < 10.9.2 の複数の脆弱性	Nessus	MacOS X Local Security Checks	2014/2/25	2018/7/14	critical
72706	QuickTime < 7.7.5 多种漏洞 (Windows)	Nessus	Windows	2014/2/26	2018/11/15	high
72687	Mac OS X 10.9.x < 10.9.2 多种漏洞	Nessus	MacOS X Local Security Checks	2014/2/25	2018/7/14	critical
8140	Apple Quicktime 7.7.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/2/26	2019/3/6	medium
8139	Quicktime (for Windows) < 7.7.5 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Web Clients	2014/2/26	2019/3/6	medium
8138	Mac OS X < 10.9.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/2/26	2019/3/6	critical

检测

插件搜索

critical

high

critical

high

critical

critical

high

critical

critical

critical

high

critical

medium

medium

critical