Apple’s October Update Plugs Holes in XML, PHP, PDF

OS X Security Update Fixes 40 Flaws

Severity: High

9 October, 2008

Summary:

§These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions

§How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site, downloading a malicious document, or subscribing to a malicious RSS feed

§Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining full control of it

§What to do: OS X administrators should download, test and install Security Update 2008-007

Severity: Medium

25 September, 2008

Summary:

§This vulnerability affects: OS X 10.4.x (Tiger) and 10.5.x (Leopard)

§How an attacker exploits it: By enticing your users to a malicious web site

§Impact: In the worst case, an attacker executes code on your user’s computer, potentially gaining control of it

§What to do: Install Java for OS X 10.4 Release 7 or Java for OS X 10.5 Update 2 as soon as possible

Severity: High

15 September, 2008

Summary:

§ These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions

§ How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into downloading and viewing malicious images, documents, or email

§ Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining full control of it

§ What to do: OS X administrators should download, test and install Security Update 2008-006 or the OS X 10.5.5 update

Severity: Medium

9 September, 2008

Summary:

§ These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), Windows XP, and Windows Vista

§ How an attacker exploits them: By getting your user to view a maliciously-crafted movie, PICT, or QuickTime Virtual Reality (QTVR) file

§ Impact: Various results; in the worst case, an attacker could execute code on your user’s computer, potentially gaining control of it

§ What to do: Download, test and deploy QuickTime 7.5.5 for Windows or OS X

Severity:High

1 August, 2008

Summary:

§ These vulnerabilities affect: OS X 10.4.x (Tiger) and OS X 10.5.x (Leopard), both client and server versions

§ How an attacker exploits them: Multiple vectors of attack, including enticing one of your users into visiting a malicious web site or into downloading a malicious document

§ Impact: Various results; in the worst case, attacker executes code on your user’s computer, potentially gaining full control of it

§ What to do: OS X administrators should download, test and install Security Update 2008-005