Apple Plugs AirPort Hole
112205
Software update patches bug in wireless drivers that left systems vulnerable.
128482
Apple on Friday issued a security update for Mac OS X that plugs a trio of holes in its wireless network subsystem, which could potentially allow an attacker to take control of an affected system. All three of the patches involve Mac OS X version 10.4, while one is also for version 10.3.
227893
Blog: This security update for Windows users piggybacks patches for Apple users.
216653
Buffer overflow risk neutered In all the hoopla surrounding Apple's announcement of its revamped line of iPods on Wednesday, many users might have missed the company's update to iTunes, which includes a fix for a serious security flaw.â¦
226790
More and more venues are becoming hotspots. Using the wireless 802.11x protocol better known as Wi-Fi, these hotspots can be found in airports, libraries, coffeehouses, restaurants, shopping
757260
(InfoWorld) - Apple on Thursday unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities, but fewer than one-third of them could lead to hackers injecting their own code into a compromised system. Thursday's release also marked the first time this year that an operating system security update from Apple did not patch a vulnerability disclosed by the January Month of Apple Bugs project. If Apple sorted bugs by a ranking system -- as do other vendors, including Microsoft Corp. -- most of the bugs fixed by Security Update 2007-005 would be rated less than critical. In eight out of the 17, for example, exploits could do no more damage than to generate a denial of service of, or crash, the affected component. Microsoft typically pegs such vulnerabilities as "important" rather than "critical." Only five of the patched vulnerabilities could result in an attacker executing his own code. Among the serious bugs is one in how Mac OS X 10.4, known as Tiger, handles PDF files. "By enticing a user to open a maliciously crafted PDF file, an attacker could trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," Apple's advisory said. Attacks sporting this strategy, although rare on Macs, are common threats faced by Windows users, who have had to learn -- sometimes unsuccessfully -- to be wary of unexpected file attachments. Another dangerous flaw fixed Thursday exists in the code that maps ports on home networks in iChat, Apple's instant messaging service and software. An attacker need only send a malformed packet to trigger a buffer overflow, which could then be used to add malicious code to the Mac. The hacker, however, must have access to the local network to exploit the bug. Other parts of Mac OS X that were patched Thursday include BIND (Berkeley Internet Name Domain), the de facto standard Domain Name System server software, which was patched against four vulnerabilities; the Ruby CGI library (two vulnerabilities); and Fetchmail (one vulnerability). Although Thursday's update pushed Apple's year-to-date patch total to over 100, there was a bright side: It included fixes for fewer flaws thanÂ last monthÂ (25) and the month before (45). The security update can be downloaded from theÂ Apple siteÂ or using Mac OS X's built-in update service.
125499
Apple issues patch for iTunes to prevent attacks. Also: Identity thief gets jail time.
417698
The oohs and aahs from Tuesday's unveiling of Apple's new MacBook Air have died down -- mostly. Now it's time to take a closer look at just what Steve Jobs pulled out of that envelope at the Macworld Expo.
666084
New Apple security updates plug a trio of flaws that could be exploited to break into Macs via Wi-Fi connections.
81490
Five uber updates in as many months Apple has released an update that patches more than a dozen OS X vulnerabilities, several of which can lead to the remote execution of malicious code.â¦
494470
Apple rolls out four patches as Microsoft scrambles to head off a zero-day attack. Also: Routers at risk.
451531
Code that takes advantage of a Safari flaw could leave an iPhone open to attack.
476280
TechWeb - Unlike Microsoft and other vendors, Apple doesn't rank or rate the vulnerabilities it patches, but about two-thirds of the bugs could result in an attacker hijacking an unpatched Mac.
673126
Apple released its fifth security update of 2007 on Friday, correcting 13 bugs in both client and server versions of its Mac OS X operating system. The most serious security hole could lead to arbitrary code execution or a denial of service attack, although most require local access to the Mac.
353081
Blog: Recently patched browser from Apple springs another leak.
142270
Even more extreme AirPort Extreme Do Apple's latest iMacs ship with an 802.11n Wi-Fi card? Photos of the Core 2 Duo-based all-in-one consumer computer certainly imply as much, but users will have to install and run Windows Vista to see it for themselves.â¦
757864
Apple on Tuesday released its seventh security update this year for Mac OS X, correcting 22 vulnerabilities in total - 18 of which affect the company's latest 10.4.8 version of Tiger. Among the list of fixes is a buffer overflow in the Airport drivers, and four updates to the system's Security Framework.