Secunia

Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.

1) A boundary error exists in Finder, which can be exploited by malicious people to cause a buffer overflow by tricking a user to mount a malicious disk image.

Successful exploitation may allow execution of arbitrary code.

2) A null-pointer dereference error in iChat Bonjour can be exploited by malicious people to cause the application to crash.

For more information:
SA23945

NOTE: A similar issue exists in Mac OS X 10.3.

3) A format string error in the handling of AIM URLs in iChat can be exploited by malicious people to possibly execute arbitrary code.

Successful exploitation requires that a user is tricked into accessing a specially crafted AIM URL.

4) An error in the UserNotificationCenter can be exploited by malicious, local users to gain escalated privileges.

For more information:
SA23846

Solution
Apply Security Update 2007-002:
Further details available in Customer Area

Provided and/or discovered by
1) Kevin Finisterre, DigitalMunition
3) LMH

Changelog
Further details available in Customer Area

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=305102

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area