Secunia

Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.

1) Under certain circumstances, it is possible for JavaScript to bypass the same-origin policy via specially crafted archives.

2) A boundary error in Mail can be exploited to cause a buffer overflow via a specially crafted email with an overly long Real Name entry. This allows execution of arbitrary code on a user's system if a specially crafted attachment in the AppleDouble format is double-clicked.

3) An error in Safari / LaunchServices can cause a malicious application to appear as a safe file type. This may cause a malicious file to be executed automatically when visiting a malicious web site.

This vulnerability is related to:
SA18963

Solution
Apply Security Update 2006-002.
Further details available in Customer Area

Provided and/or discovered by
2) Kevin Finisterre, DigitalMunition.
3) The vendor credits Will Dormann and Andris Baumberger.

Changelog
Further details available in Customer Area

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=303453

Kevin Finisterre:
http://www.digitalmunition.com/DMA%5B2006-0313a%5D.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area