Secunia

LMH has reported some vulnerabilities in Apple Mac OS X, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An integer overflow error in the "byte_swap_sbin()" function in bsd/ufs/ufs/ufs_byte_order.c can be exploited to cause a kernel panic.

2) An error exists in the "ufs_dirbad()" function when handling corrupted UFS DMG images and can be exploited to cause a kernel panic.

NOTE: These vulnerabilities are only remotely exploitable via the Safari web browser when the "opening safe files after downloading" option is enabled.

The vulnerabilities are reported on Mac OS X 10.4.8 running on a x86 platform. Other versions may also be affected.

Solution
Update to Mac OS X 10.4.9 or install Security Update 2007-003.
Further details available in Customer Area

Provided and/or discovered by
LMH

Changelog
Further details available in Customer Area

Original Advisory
http://projects.info-pull.com/moab/MOAB-11-01-2007.html
http://projects.info-pull.com/moab/MOAB-12-01-2007.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area