Apple Mac OS X Two Vulnerabilities - Secunia Advisories - Vulnerability Intelligence

Apple Mac OS X Two Vulnerabilities
Secunia Advisory:	SA16047	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2005-07-13
Popularity:	9,338 views

Critical:	Moderately critical
Impact:	Manipulation of data DoS
Where:	From remote
Solution Status:	Vendor Patch

OS:	Apple Macintosh OS X

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2005-1933 CVE-2005-2194

Description: Two vulnerabilities have been reported in Mac OS X, which can be exploited by malicious people to cause a DoS (Denial of Service) or replace system widgets on a user's system. 1) A NULL pointer dereference error in the TCP/IP implementation can be exploited to crash the kernel via a specially crafted TCP/IP packet. The vulnerability affects Mac OS X 10.4 and Mac OS X Server 10.4. 2) An error in the Dashboard can be exploited to install widgets with the same internal identifier (CFBundleIdentifier) as an Apple-supplied widgets thereby replacing it. The vulnerability affects Mac OS X 10.4 and Mac OS X Server 10.4. Solution: Apply patches. Mac OS X Server 10.4.2 Combo: http://www.apple.com/support/downloads/macosxserver1042combo.html Mac OS X Update 10.4.2: http://www.apple.com/support/downloads/macosxupdate1042.html Mac OS X Update 10.4.2 Combo: http://www.apple.com/support/downloads/macosxupdate1042combo.html Provided and/or discovered by: 1) The vendor credits Julian Y. Koh. 2) mithras.the.prophet Original Advisory: Apple: http://docs.info.apple.com/article.html?artnum=301948 mithras.the.prophet: http://www1.cs.columbia.edu/~aaron/files/widgets/ Other References: US-CERT VU#983429: http://www.kb.cert.org/vuls/id/983429

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

10th Oct, 2008

New advisories:	15
New vulnerabilities:	83
Updated advisories:	41

Moderately // 713 views

ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability

Moderately // 699 views

Built2go Real Estate Listings "event_id" SQL Injection

Highly // 1,012 views

Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow

Moderately // 732 views

Red Hat update for cups

Highly // 748 views

DFF PHP Framework API "DFF_config[dir_incl ude]" File Inclusion Vulnerabilities

Not // 816 views

FUJITSU Interstage Products Apache Tomcat Security Bypass

Moderately // 1,080 views

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Moderately // 706 views

Fedora update for condor

Moderately // 1,108 views

CUPS Multiple Vulnerabilities

Not // 771 views

Gentoo Portage Insecure Python Module Search Path Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.