Exploit released for Mac OS X flaw
608293
There is no need for serious alarm, but the exploit does appear to have been crafted before Apple Computer patched the flaw last week.
40844
Vulnerabilities in Apple's widely used QuickTime media player software can expose both Macs and Windows PCs to attack.
417891
Apple Computer (Nasdaq: AAPL) has issued a new security patch to mend seven vulnerabilities in its Mac OS X operating system.
520541
Exploit code targets a flaw that generated a government warning last week.
425056
p2pnet.net News:- Apple Computer has issued a patch for 15 Mac OS X security flaws. But, &quot;It ain&#39;t us - it&#39;s them!&quot; - it&#39;s saying of some of the problems, &#39;them&#39; being certain open source components.
457591
Hackers revealed exploit code for JavaScript vulnerability.
688279
Computer maker Apple (Quote, Chart) has released a security update to fix more than a dozen flaws in the Jaguar and Panther versions of its flagship Mac operating system.
455250
A bug in Apple Inc.'s popular iTunes music player and online store software could be used by hackers to run malicious code on a compromised PC or Mac.
619115
A new and reportedly dangerous vulnerability has been discovered already through an exploit already in the wild, and this time it affects users of Excel with the older file format.
655104
Apple has released a security fix for its QuickTime media player software, fixing a critical bug that had been worrying security experts for nearly a month.The update, released Wednesday, fixes a vulnerability in the RTSP (Real Time Streaming Protocol) used by QuickTime to handle streaming media.On Jan. 10, researcher Luigi Auriemma disclosed the flaw by posting proof-of-concept attack code that could be used to run unauthorized software on a victim&#39;s computer. For the attack to work, the criminal would have to first trick the user into viewing a maliciously encoded QuickTime media file.With the attack code available, security researchers had been hoping that Apple would address the flaw. Wednesday&#39;s QuickTime 7.4.1 update is for both the Mac OS X and Windows operating systems.It is Apple&#39;s fifth QuickTime update since October. The company has been forced to issue the flurry of patches as security researchers have taken a closer look at media player flaws during the past year. In December, Apple patched a separate RTSP vulnerability, which online criminals had already started to use in their attacks.&quot;In the past few months, QuickTime has been a prevalent target for security researchers,&quot; said Andrew Storms, director of security operations with nCircle Network Security. &quot;Internet media applications on the desktop have been a rich target for attackers, and this trend is sure to continue as most users aren&#39;t yet accustomed to attacks arriving in the form of a viral video.&quot;
29646
Users of Firefox yesterday began receiving notices of the availability of version 2.0.0.7, which the Mozilla organization said addresses a vulnerability involving Apple's QuickTime plug-in. In BetaNews tests of the new version this afternoon, the vulnerability in question appears to have been fully patched.
467471
The beta build of Mac OS X 10.5 has leaked to the Internet and is being downloaded by users of PirateBay.
413013
Security researcher issues a warning that a rogue software application targeting the Mac has surfaced.
448507
An independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect.
702003
TechWeb - Apple Computer Inc. released a security patch for its Mac OS X iChat instant messaging client.
750699
Bundle of fixes includes patch for zero-day Wi-Fi hijack flaw and other bugs, some that could let an attacker commandeer Macs.
402174
(InfoWorld) - Apple Computer will soon be a member of the "month of bugs" club. On Jan. 1, two security researchers will begin publishing details of a flood of security vulnerabilities in Apple's products.Â Their planÂ is to disclose one bug per day for the entire month, they said Tuesday. The project is being launched by an independent security researcher, Kevin Finisterre, and a hacker known as LMH, who declined to reveal his identity. Some of the bugs "might represent a significant risk," LMH said in an e-mail interview. "Others have a lower impact on security. We are trying to develop working exploits for every issue we find." The two hackers plan to disclose bugs in the Mac OS X kernel as well as in software such as Safari, iTunes, iPhoto and QuickTime, LMH said. Some of the bugs will also affect versions of Apple's software designed to run on Microsoft Corp.'s Windows operating system, he added. LMH was one of the brains behind the recent Month of Kernel Bugs project, which exposed flaws at the core of several different operating systems. It was inspired by an earlier effort, called the Month of Browser Bugs, which was kicked off in July. This latest Apple project is being launched to raise awareness of security vulnerabilities in Apple's products and to "stomp smugness," Finisterre said via e-mail. While the Macintosh is generally considered to be more secure than the Windows PC, many security researchers believe that this reputation is not attributable to any superior security practices on the part of Apple. They say attackers have been deterred by the Mac OS X's more secure Unix kernel and the product's less widespread adoption. Apple enthusiasts and security researchers have been at odds since last August, when David Maynor and Jon Ellch claimed to have discovered a flaw that affected Apple's wireless device drivers. They played a video at the Black Hat conference demonstrating how this flaw could be used to run unauthorized code on a MacBook. However, their claims have been slammed because the demonstration used a third-party wireless card rather than the one that ships with the MacBook, and because the two hackers still have not published the code used in their attack. LMH said the Apple community's negative response to Maynor and Ellch's claims played a role in the decision to launch the Month of Apple bugs. "I was shocked with the reaction of some so-called 'Apple fans,'" he said. "I can't understand why some people react badly to disclosure of issues in their system of choice. ... That helps to improve its security." A similar effort to disclose flaws in Oracle's software had to be abandoned before it was ever launched last month. The man behind the Week of Oracle bugs, Cesar Cerrudo, of Argeniss Information Security, said he pulled the plug when it became clear that the project could damage the relationship between one of his customers and Oracle. "This customer realized that they could have had serious business problems, so they changed their mind and asked to cancel it," he said via instant message on Tuesday. LMH said he didn't expect any legal problems from Apple. "I keep talking to a guy from the Apple security team and I'm willing to help whenever necessary," he said. "I'm far away from any illegal activity." Apple, for its part, did not seem to be upset with the project. "WeÂ always welcome feedback on how to improve security on the Mac," said Anuj Nayar, an Apple spokesman. Â