Secunia

LMH has reported a vulnerability in Mac OS X, which can potentially be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer overflow error in the "ffs_mountfs()" function when handling UFS filesystem disc images. This can be exploited to cause a heap-based buffer overflow via a specially crafted UFS DMG image.

Successful exploitation may allow the execution of arbitrary code.

NOTE: This is only remotely exploitable via the Safari web browser when the "opening safe files after downloading" option is enabled.

The vulnerability is reported in an updated Mac OS X 10.4.8. Other versions may also be affected.

Solution
Update to Mac OS X 10.4.9 or install Security Update 2007-003.
Further details available in Customer Area

Provided and/or discovered by
LMH

Changelog
Further details available in Customer Area

Original Advisory
http://projects.info-pull.com/moab/MOAB-10-01-2007.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area