Apple’s October Update Plugs Holes in XML, PHP, PDF

OS X Security Update Fixes 40 Flaws

Severity: High

9 October, 2008

Summary:

§These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions

§How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site, downloading a malicious document, or subscribing to a malicious RSS feed

§Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining full control of it

§What to do: OS X administrators should download, test and install Security Update 2008-007

Severity: High

1 July, 2008

Summary:

§ These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions; as well as Safari 3.x for OS X 10.4.x

§ How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site

§ Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining control of your user’s computer

§ What to do: OS X administrators should download, test and install Security Update 2008-004, Mac OS X 10.5.4, and Safari 3.1.2

Severity: Medium

18 March, 2008

Summary:

• These vulnerabilities affect: Safari 3 for OS X and Windows
• How an attacker exploits them: By enticing one of your users into visiting a malicious web site
• Impact: Various results; in the worst case, attacker executes code on your user’s computer, with your user’s privileges
• What to do: Install Safari 3.1

Severity: High

18 March, 2008

Summary:

• These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions
• How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a URL or web site
• Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining complete of your user’s computer
• What to do: OS X administrators should download, test and install Security Update 2008-002

Severity: High

11 February, 2008

Summary:

• These vulnerabilities affect: OS X 10.4.11(Tiger) and OS X 10.5.x (Leopard), both client and server versions
• How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site
• Impact: Various results. In the worst case, attacker executes code on your user’s computer, with your users privileges
• What to do: OS X 10.4.11 users should install Security Update 2008-001. OS X 10.5.x users should install version 10.5.2

Exposure:

Today, Apple released a security update fixing over 11 security issues in software packages that ship as part of OS X, including Mail, Launch Services, and Samba. Many of these vulnerabilities allow attackers to execute any code they choose on your OS X machines, so we rate this update Critical. Apply it as soon as you can. Some of the fixed vulnerabilities include: