Four MOAB bugs swatted by Security Update 2007-002

As Erica just noted, Security Update 2007-02 is out, and four of the open security issues raised by the Month of Apple Bugs project are now history. These problems have been addressed by the ongoing patch efforts of Landon Fuller, but his fixes should defer automatically to the new official versions.

Finder -- Mounting a maliciously-crafted disk image may lead to an application crash or arbitrary code execution
iChat (2 flaws) -- attackers on the local network may be able to cause iChat to crash, & visiting malicious websites/AIM URLs may lead to an application crash or arbitrary code execution
UserNotificationCenter -- local users may be able to escalate to system-wide privileges

Install with caution.

View Tags

Source: http://docs.info.apple.com/article.html?artnum=305102

Categories

Software Update Security

As Erica just noted, Security Update 2007-02 is out, and four of the open security issues raised by the Month of Apple Bugs project are now...

Add a Comment

Sign in »

6 Comments

Filter by:

I wonder if the iChat update fixes rdar:///4833010, which I reported back in November; it's essentially the same as the URL handler vulnerability, although it applies to a different part of iChat's code. Apple haven't marked the bug as anything other than â€˜Openâ€™, so I'm guessing notâ€¦

February 16 2007 at 8:34 AM Report abuse Permalink rate up rate down Reply