Apple Tries to Plug Holes in Mac OS X Security
[author:zyk06 Public time:Mar 15, 2007] |
|
Apple issued a security update late Tuesday to plug dozens of security holes in both the client and server versions of Mac OS X 10.4.9.
The patches address both vulnerabilities in Apple's own software and a number of third-party components. Among the most potentially serious vulnerabilities lies in the processing disk images that could allow an attacker to remotely execute malicious code.
"By enticing a local user to open a maliciously crafted disk image, an attacker could trigger the overflow which may lead to an unexpected application termination or arbitrary code execution," Apple states in its advisory.
The damage of other flaws addressed in the patch, however, is less severe, and could only be used to cause a system crash. The update fixes a number of flaws exposed in January's Month of the Apple Bugs and last November's Month of the Kernel Bugs projects.
In addition to the Mac OS X patch, Apple issued a second update Tuesday to fix a bug in iPhoto dealing with the photocast feature. An attacker could create a malicious photocast that would compromise a Mac when opened by a user, the company said.
Author: Brian Prince
Source: http://www.pcmag.com/
Printed From:http://www.free-press-release.com/news/200703/1173964387.html
Source:Free Press Release
Similar news >>
Botnet Targets iPhone Buyers [Jul 15, 2007]
Apple's big game hunt: Safari aims to lure Windows users [Jun 14, 2007]
iPhone users will be required to launch an iTunes account to set-up their phone [Jun 13, 2007]
Apple's AirPort Extreme can pose security risk [Apr 11, 2007]
Apple Tries to Plug Holes in Mac OS X Security [Mar 15, 2007]
Apple releases patches for 'critical' iTunes, QuickTime flaws [Mar 6, 2007]
FutureBazaar Partners with AppLabs Technologies for Security Testing [Feb 15, 2007]
Nike + iPod poses threat to personal security [Dec 4, 2006]
Information Security Courses from Appin Knowledge Solutions [Sep 12, 2006]
Appin Information Security & Ethical Hacking – The most innovative training products released. [Jul 7, 2006]
|
|
