|
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA28136
|
|
|
Release Date:
|
2007-12-18
|
|
Last Update:
|
2007-12-24
|
|
Popularity:
|
10,640 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Hijacking
Security Bypass
Cross Site Scripting
Exposure of system information
Exposure of sensitive information
Privilege escalation
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Apple Macintosh OS X
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply Security Update 2007-009 v1.1.
Security Update 2007-009 1.1 (10.4.11 Universal):
http://www.apple.com/support/download...ityupdate20070091110411universal.html
Security Update 2007-009 1.1 (10.4.11 PPC):
http://www.apple.com/support/downloads/securityupdate20070091110411ppc.html
Security Update 2007-009 1.1 (10.5.1):
http://www.apple.com/support/downloads/securityupdate2007009111051.html
Provided and/or discovered by:
2) The vendor credits Sean Harding.
3) The vendor credits Tom Ferris, Adobe Secure Software Engineering Team (ASSET).
5) The vendor credits Dave Camp, Critical Path Software.
7) The vendor credits Wei Wang, McAfee Avert Labs.
12) The vendor credits Michal Zalewski, Google Inc.
13) The vendor credits Xeno Kovah, originally reported in Mac OS X 10.5 by heise Security.
15) The vendor credits Tavis Ormandy and Will Drewry, Google Security Team.
18) The vendor credits Lukhnos D. Liu, Lithoglyph Inc.
25) Sean Larsson, VeriSign iDefense Labs.
26) Moritz Jodeit.
27) The vendor credits Kevin Finisterre, DigitalMunition.
Changelog:
2007-12-19: Added link to iDefense Labs. Updated credits section. Added link to US-CERT.
2007-12-24: Vendor issues updated patches as previous patches caused Safari to crash. Updated "Solution" section.
Original Advisory:
Apple:
http://docs.info.apple.com/article.html?artnum=307179
http://docs.info.apple.com/article.html?artnum=307224
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=633
Other References:
SA19218:
http://secunia.com/advisories/19218/
SA24318:
http://secunia.com/advisories/24318/
SA25699:
http://secunia.com/advisories/25699/
SA26135:
http://secunia.com/advisories/26135/
SA26573:
http://secunia.com/advisories/26573/
SA26837:
http://secunia.com/advisories/26837/
SA26985:
http://secunia.com/advisories/26985/
SA27233:
http://secunia.com/advisories/27233/
SA27450:
http://secunia.com/advisories/27450/
SA27543:
http://secunia.com/advisories/27543/
SA27546:
http://secunia.com/advisories/27546/
SA27781:
http://secunia.com/advisories/27781/
SA27785:
http://secunia.com/advisories/27785/
US-CERT VU#905292:
http://www.kb.cert.org/vuls/id/905292
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
