,,`, W€(v)€ | €€| |أ ,`

Share and download latest booters , room tools , id creators, voice tools, chat clients & lot more exciting stuffs of Yahoo! You call also share your hacking tips out here & I'll add a Forum for ID trading soon.
HomeHome  PortalPortal  CalendarCalendar  FAQFAQ  SearchSearch  RegisterRegister  MemberlistMemberlist  UsergroupsUsergroups  Log in  

Share | 

 Apple fixes 17 Mac OS X flaws

Go down 
Admin j3ff
Admin j3ff

Number of posts : 50
Registration date : 2007-06-06

PostSubject: Apple fixes 17 Mac OS X flaws   Fri Jun 15, 2007 1:06 am

Apple Inc. today unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities, but fewer than one-third of them could lead to hackers injecting their own code into a compromised system.

Today's release also marked the first time this year that an operating system security update from Apple did not patch a vulnerability disclosed by the January Month of Apple Bugs project.

If Apple sorted bugs by a ranking system -- as do other vendors, including Microsoft Corp. -- most of the bugs fixed by Security Update 2007-005 would be rated less than critical. In eight out of the 17, for example, exploits could do no more damage than to generate a denial of service of, or crash, the affected component. Microsoft typically pegs such vulnerabilities as "important" rather than "critical." Only five of the patched vulnerabilities could result in an attacker executing his own code.

Among the serious bugs is one in how Mac OS X 10.4, known as Tiger, handles PDF files. "By enticing a user to open a maliciously crafted PDF file, an attacker could trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," Apple's advisory said. Attacks sporting this strategy, although rare on Macs, are common threats faced by Windows users, who have had to learn -- sometimes unsuccessfully -- to be wary of unexpected file attachments.

Another dangerous flaw fixed today exists in the code that maps ports on home networks in iChat, Apple's instant messaging service and software. An attacker need only send a malformed packet to trigger a buffer overflow, which could then be used to add malicious code to the Mac. The hacker, however, must have access to the local network to exploit the bug.

Other parts of Mac OS X that were patched today include BIND (Berkeley Internet Name Domain), the de facto standard Domain Name System server software, which was patched against four vulnerabilities; the Ruby CGI library (two vulnerabilities); and Fetchmail (one vulnerability).

Although today's update pushed Apple's year-to-date patch total to over 100, there was a bright side: It included fixes for fewer flaws than last month (25) and the month before (45).

The security update can be downloaded from the Apple site or using Mac OS X's built-in update service.
Back to top Go down
View user profile http://spacetools.realbb.net
Apple fixes 17 Mac OS X flaws
Back to top 
Page 1 of 1
 Similar topics
» aromatherapy and migrraines?
» Program:Vista---Highjacked browers,main web pages, etc...nothing fixes it
» iTunes alternatives - Manage your iPod without iTunes

Permissions in this forum:You cannot reply to topics in this forum
,,`, W€(v)€ | €€| |أ ,` :: Latest NeWs :: Other Internet news-
Jump to: