[ news_security_news ] Apple Pesticide: OS X Security Flaws
John Stith Staff Writer
2005-08-16
Insider Reports RSS Feed
The farmers out at Apple were sprayin' for critters when they released the new security update for OS X. Long thought to be near impregnable, the entity known as Apple had to root out some rot out of it's AppKit and Safari browser.
The big holes came in the form of vulnerabilities against .rtf files and .doc files in the Appkit. Annoying hackers would use those files to either execute malware or create extra user accounts.
Safari was also fixed, now being protected against .rtf files and .pdf files too. Also, forms using XSL format are now submitted in the right way to keep them from going the wrong way.
Bluetooth code has also been worked for device authentication purposes, making sure they are reported correctly.
Also the patch fixes vulnerabilities in the OS' CoreFoundation code. Kerberos as well as the directory services code both received updates. The Loginwindow application also got corrected to prevent users who know 2 passwords from getting access to a third account without a password.
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Insider Reports RSS Feed
|
|