|
Mac OS X Security Update Fixes Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA12249
|
|
|
Release Date:
|
2004-08-10
|
|
Last Update:
|
2004-08-17
|
|
Popularity:
|
18,228 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Exposure of sensitive information
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple Macintosh OS X
|
|
| Software: | Safari 1.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Apple has issued a security update for Mac OS X, which fixes various vulnerabilities.
1) Multiple vulnerabilities in libpng can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a user's system.
For more information:
SA11505
SA12219
2) A vulnerability in the Safari browser can be used by a malicious website to steal sensitive information from forms.
The vulnerability can reportedly only be exploited in the situation of a form being sent with the POST method to an URL, which performs a redirection to another URL.
3) A vulnerability in the processing of network traffic can be exploited by malicious people to cause a DoS.
The vulnerability is exploited by sending a sequence of specially crafted IP fragments. The attack known as the "Rose Attack" will cause the system to use too much system resources resulting in DoS.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
