Apple Patches 20 Mac OS X Flaws

digerati · May 4, 2005, 09:01 PM

"Apple has issued a major security update for Mac OS X 10.3, comprised of 20 patches for various applications and libraries. The advisory comes just days after the release of Apple's new OS, which is not affected. Security firm Secunia has given the vulnerabilities a cumulative rating of "highly critical."

Specifically, a flaw in the way Apple's AppKit handles TIFF images could lead to arbitrary code execution on an unpatched system.

Apache, which ships with Mac OS X, could also open the door for a remote system compromise due to a buffer overflow in the Web server's htdigest program. However, Secunia said a possible exploit for the flaw is unlikely.

Another critical issue resolved in the update relates to AppleScript, Apple's native Mac scripting language. A flaw in the URI mechanism could lead to an AppleScript executing differently than displayed. Apple has also fixed buffer overflows in the Foundation framework, libXpm and NetInfo."
___________________________
Read More/Source: BetaNews

May 4, 2005, 09:01 PM	#1
digerati Everyones life has worth Join Date: May 2003 Location: My Yellow Bug Posts: 3,779 Rep Power: 0	Apple Patches 20 Mac OS X Flaws "Apple has issued a major security update for Mac OS X 10.3, comprised of 20 patches for various applications and libraries. The advisory comes just days after the release of Apple's new OS, which is not affected. Security firm Secunia has given the vulnerabilities a cumulative rating of "highly critical." Specifically, a flaw in the way Apple's AppKit handles TIFF images could lead to arbitrary code execution on an unpatched system. Apache, which ships with Mac OS X, could also open the door for a remote system compromise due to a buffer overflow in the Web server's htdigest program. However, Secunia said a possible exploit for the flaw is unlikely. Another critical issue resolved in the update relates to AppleScript, Apple's native Mac scripting language. A flaw in the URI mechanism could lead to an AppleScript executing differently than displayed. Apple has also fixed buffer overflows in the Foundation framework, libXpm and NetInfo." ___________________________ Read More/Source: BetaNews