Apple issues Apple TV security fix
157515
Blog: This security update for the Apple TV device follows one last month for desktop and laptop users.
569222
TechWeb - The vulnerability affects both Windows and Mac OS X versions of Apple's QuickTime software.
757260
(InfoWorld) - Apple on Thursday unveiled the year's fifth major security update for Mac OS X to patch 17 vulnerabilities, but fewer than one-third of them could lead to hackers injecting their own code into a compromised system. Thursday's release also marked the first time this year that an operating system security update from Apple did not patch a vulnerability disclosed by the January Month of Apple Bugs project. If Apple sorted bugs by a ranking system -- as do other vendors, including Microsoft Corp. -- most of the bugs fixed by Security Update 2007-005 would be rated less than critical. In eight out of the 17, for example, exploits could do no more damage than to generate a denial of service of, or crash, the affected component. Microsoft typically pegs such vulnerabilities as "important" rather than "critical." Only five of the patched vulnerabilities could result in an attacker executing his own code. Among the serious bugs is one in how Mac OS X 10.4, known as Tiger, handles PDF files. "By enticing a user to open a maliciously crafted PDF file, an attacker could trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," Apple's advisory said. Attacks sporting this strategy, although rare on Macs, are common threats faced by Windows users, who have had to learn -- sometimes unsuccessfully -- to be wary of unexpected file attachments. Another dangerous flaw fixed Thursday exists in the code that maps ports on home networks in iChat, Apple's instant messaging service and software. An attacker need only send a malformed packet to trigger a buffer overflow, which could then be used to add malicious code to the Mac. The hacker, however, must have access to the local network to exploit the bug. Other parts of Mac OS X that were patched Thursday include BIND (Berkeley Internet Name Domain), the de facto standard Domain Name System server software, which was patched against four vulnerabilities; the Ruby CGI library (two vulnerabilities); and Fetchmail (one vulnerability). Although Thursday's update pushed Apple's year-to-date patch total to over 100, there was a bright side: It included fixes for fewer flaws thanÂ last monthÂ (25) and the month before (45). The security update can be downloaded from theÂ Apple siteÂ or using Mac OS X's built-in update service.
101525
Apple has issued a fix for its Airport Extreme product, which it says would prevent attackers from causing system crashes on computers connected to a network. Only Intel Core Duo systems are affected, according to an advisory.
417891
Apple Computer (Nasdaq: AAPL) has issued a new security patch to mend seven vulnerabilities in its Mac OS X operating system.
259181
In early October Apple released a small series of patches for Mac OS X version 10.2 and later. Most of the fixes in this group blocked possible denial-of-service problems that are, to date, theoretical.
521915
Apple's promised software update to the Apple TV is now out and enables users to watch video from the popular YouTube Web site. The iPhone also will include a special YouTube viewing application.
250588
Apple fixes a critical bug in its QuickTime media player software that had been worrying security experts for nearly a month.
629732
Apple has released its first security updates of the new year, fixing bugs in its QuickTime media player and iPhone and iPod touch devices.As with previous updates, the iPhone 1.1.3 software patch sent those who had installed the unauthorized Jailbreak software -- used to run third-party applications on the iPhone -- scrambling to get their phones up and running. That&#39;s because Apple&#39;s updates have so far always rendered Jailbreak unusable, forcing users to go through a complex re-installation process.According to the Unofficial Apple Weblog, it is possible to run third-party software following this latest update, but the process is complex. A simpler Jailbreak 1.1.3 script is expected to be posted eventually at the iPhone Wiki, which is the hub of much iPhone hacking.The iPhone update fixes two flaws in the Safari browser, including a critical bug that could be exploited to run unauthorized software on the device. A third bug could let an unauthorized user bypass Passcode Lock and launch iPhone applications. The iPod touch is susceptible to the Safari bugs, Apple said.These updates will be rolled out to customers over the next week via the devices&#39; iTunes update mechanism.The QuickTime 7.4 update fixes four critical flaws in the software that could be exploited by attackers to crash the media player or even run unauthorized software on a victim&#39;s computer. The update is available for both the Windows and Mac OS X operating systems.However, the software does not fix a serious flaw in the player that was disclosed over the weekend.Security experts are particularly concerned over this flaw because attack code showing how it can be exploited has also been published. Apple is still working to fix the vulnerability, which has to do with QuickTime&#39;s use of the Real-Time Streaming Protocol.
594089
InfoWorld - Apple has released its first security updates of the new year, fixing bugs in its QuickTime media player and iPhone and iPod touch devices.
406616
Insecurity through obscurity Apple has released updates for two widely distributed products that harbored a raft of security vulnerabilities, some of which were actively being exploited by miscreants. Unbelievably, the company isn't presenting either as a security fix to mainstream users despite the risk the bugs pose for its millions of users.â¦
130977
A team of computer security consultants say they have found a flaw in the Apple iPhone that allows them to take control of the device.
573469
MacCentral - Apple on Monday released Security Update 2004-09-30, which fixes two AFP Server and CUPS issues as well as problems with NetInfoManager, postfix and the ServerAdmin component in Mac OS X Server v10.2.8 and v10.3.5. In addition, a QuickTime heap buffer overflow problem that could allow someone to execute code hidden in a BMP has been repaired. The CUPS and QuickTime fixes apply to Mac OS X v10.3.5 and v10.2.8 as well as the Server versions of each while the others apply only to the user and Server editions of v10.3.5.
293497
Windows browser not 'secure from day one' Three days after unleashing a bug-infested beta of its Safari browser on Windows users, Apple has released an update plugging three serious holes that could allow miscreants to commandeer a user's machine.â¦
216653
Buffer overflow risk neutered In all the hoopla surrounding Apple's announcement of its revamped line of iPods on Wednesday, many users might have missed the company's update to iTunes, which includes a fix for a serious security flaw.â¦
642987
Apple Inc. has updated iTunes to better run on Windows Vista -- although "a few" problems still remain -- and released a security update for QuickTime.
318146
A new software upgrade to Apple TV turns the device into a substantially different product.