UPDATE: Apple Releases Security Patches for Mac OS X!!

Kiran.dks · 16-02-2007, 12:48 PM

Apple plugs four security holes
Apple issued four security updates Thursday to fix flaws in Mac OS X and iChat identified by the Month of Apple Bugs project.

Two of the flaws could allow an attacker to execute code on an unpatched system, Apple said. Patches are now available on Apple's Web site or through the Software Update selection under the Apple menu on a Mac.

Apple noted that proof-of-concepts for the flaws were posted on the Month of Apple Bugs Web site. But it doesn't appear that attack code has surfaced using the concepts outlined by the project. Apple has fixed several flaws identified during the course of January by the project, but some remain open.

The two flaws that could lead to arbitrary code execution are found in Finder and iChat. There's a buffer overflow flaw in Finder that could allow an attacker to take control of a system by "enticing a user into mounting a malicious disk image," or tricking someone into enabling local access of a file supposedly stored on a remote server. Apple credited Kevin Finisterre, one of the participants in the Month of Apple Bugs project, for reporting the issue, something it did not do on the three other flaws patched on Thursday.

The other patch, for iChat, fixes an issue in which a user could click on a malicious URL in a chat session and trigger an overflow, possibly opening the system to an attacker.

Two patches concern flaws that require a malicious local user. This includes another iChat flaw that could cause the application to crash as well as a fix for a UserNotification flaw that could allow system files to be overwritten.

Download: Mac OSX Security Updates

News Source: CNET NEWS

Digit_Dragon · 16-02-2007, 05:11 PM

Ya...one of my friend

was aking for this....
Thanks dude.

anandk · 16-02-2007, 06:06 PM

thanx 4 d info !

ketanbodas · 16-02-2007, 10:07 PM

How come

Isnt Apple supposed to be PERFECT !

mail2and · 16-02-2007, 10:31 PM

Quote:

Originally Posted by ketanbodas

How come

Isnt Apple supposed to be PERFECT !

Eh? No software is perfect. Every OS made by man has vulnerabilities, which are fixed by the respective companies in the form of security updates.

aryayush · 17-02-2007, 12:08 AM

There was a Month of Apple Bugs which promised to come up with a new Apple bug every day of the month, i.e. a total of thirty-one bugs. They could, however, only come up with twenty or so. Including this update, Apple has already fixed five of them. The most critical one was fixed on 23rd January itself, before the MoAB had even run its course.