More MOAB fixes from Landon Fuller

It was a busy weekend for Landon Fuller and his crew of white-hat hackers working to plug the holes in Mac OS X and associated applications revealed by Month of Apple Bugs. His most recent two posts detail patches for Transmit and iChat, a mount warning for disk image downloads in Safari, and a patch for a zero-day vulnerability that's not even on the MOAB hit list: a heap overflow in the Java GIF image handling code, which has been fixed in Sun's releases of the Java virtual machine but not yet in Apple's release.

Landon also points to the BOM Shelter python script, written by his buddy William Carrel; the script modifies permissions on several items to avoid the vulnerabilities of MOABs 5, 8 and 15.

The thanks and appreciation of the entire Mac-using community are due to these guys, who are volunteering their time and considerable expertise to keep us all a little bit safer.

View Tags

Source: http://landonf.bikemonkey.org/2007/01/20#MOAB_19_and_Java_Ex…

Categories

Cool tools Hacks Security

It was a busy weekend for Landon Fuller and his crew of white-hat hackers working to plug the holes in Mac OS X and associated applications...

Add a Comment

Sign in »

3 Comments

Filter by:

Michael

I still want to know where these Earth shattering bugs are...we're at day 22, and I haven't seen much from the MOAB folks since Day 2 when they hit us with the VLC "apple bug".

January 22 2007 at 1:13 PM Report abuse Permalink rate up rate down Reply

Buthidae

I've found this "Month of Apple Bugs" to be, on the whole, very disappointing. Are these really the best they could come up with? VLC? Transmit? Java?! Not only are a sizable chunk of them of them... not actually Apple bugs, they're just whiny niggles that these so-called "security experts" spent far too long conjuring up. Hats off to Landon for fixing these "bugs" up in double-quick time :)

January 22 2007 at 12:44 PM Report abuse Permalink rate up rate down Reply

Henry

Every time I see one of these headlines I think "massive ordinance air blast" bomb not "month of apple bugs." Hmm.

January 22 2007 at 10:31 AM Report abuse Permalink rate up rate down Reply