You are here: silicon.com > Software > Malware

Apple releases patch for critical flaw

Tiger and Leopard fit to roar

Tags: patch, dns, apple

By Steven Musil

Published: 1 August 2008 09:08 GMT

Apple released a security update yesterday to users of its Tiger and Leopard operating systems to address a critical Domain Name System flaw, along with a dozen other updates.

The DNS flaw, which was first reported by Dan Kaminsky of IOActive on 8 July, could allow attackers to redirect website visitors to any site they choose and present forged information. The DNS translates the common name of a website into its numerical IP address, and is therefore a fundamental component to the internet.

An exploit code that could allow someone to attack the DNS was available in various places on the internet on 23 July.

Apple's update also fixes a QuickLook bug where loading a malicious Microsoft Office file could lead to "arbitrary code execution".

Apple recommends Security update 2008-005 for all systems running Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.4, Mac OS X Server v10.5.4. The update is available at Apple.com or through the update mechanism in OS X.

Original article: Apple releases patch for critical DNS flaw from CNET News.com

Add comment

Print story with

Email story

Record Mac sales give Apple stellar quarter

Microsoft OS update service availability tops Apple, Ubuntu

Apple iPhone loses market share

Apple patches up Safari

Apple profits up thanks to Mac, iPhone and iPod

In silicon.com

Commentary

Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead

Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy

Latest News

Phishers set their sights on corporate accounts

Tax-refund phishing scams hit an all-time high

First critical Windows 7 patches released

Online fraudsters enlist Trojans to run off with your money

Microsoft files lawsuits in malicious-ad crackdown

Jobs

User Experience Architect

Computer / Software Apple Macintosh literate (OS X) For documentation: Adobe Illustrator, InDesign, Microsoft Office, Keynote Technology Experience ...

iPhone Objective C Developer

Their apps have reached the number one slot in the iTunes category, and have also been featured by Apple. They are currently looking for an ...

Senior Technical Support Engineer Windows 2003 / AD - Leeds

You'll be working as the technical lead for a small team of engineers on our customer site to deliver 2nd line support of our Windows-based technical ...

Special Report Focus

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.