You are here: silicon.com > Software > Security Strategy

Security Strategy

Apple Mac OS X security holes get plugged with latest update

Images, downloads put through tougher checks

Tags: os x, mac, apple

By Elinor Mills

Published: 6 August 2009 08:37 GMT

Apple on Wednesday issued a security update that fixes 18 vulnerabilities including several that put computers running Mac OS X at risk of remote code execution if a maliciously crafted image is viewed.

In addition to fixing a problem with how PNG images are handled, Security Update 2009-003 fixes issues related to ImageIO's handling of OpenEXR images, EXIF metadata, as well as Canon RAW images and images with an embedded ColorSync profile.

The update, which arrives as part of the release of Mac OS X v10.5.8, extends the list of content types the Mac OS X will flag as potentially unsafe when downloaded from the web. It also fixes a problem with how XML content is handled and resolves the way the kernel handles AppleTalk response packets.

Apple also identified and fixed a problem with MobileMe. Signing out of MobileMe does not remove all credentials and a person with access to the local user account could continue to access associated systems.

Original article: Apple fixes hole with Mac OS X image viewing from CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Tim Ferguson Exclusive: Former MySQL boss Marten Mickos talks open source Why Microsoft could become one of the "biggest friends of open source" and why Oracle getting its hands on MySQL could be "one of the biggest open source coups ever"...

Naked CIO Naked CIO: Cloud computing more expensive than we thought? Smart IT leaders will examine the impact of how they pay for tech


  • Jobs
iPhone/Mac Software Engineer

Experience Required: - A minimum of 2 years experience of software development for iPhone and/or Mac OS X using Cocoa and Objective C Understanding ...

Technical Support Engineer - French Speaking

Windows 2000, Windows NT, Novell, Lotus Notes, Mac OS). Support Engineer required by Logic Engagements Ltd to work for our client, based in ...

Mac/PC Support Engineer –Mac OSX, Adobe, Quark, Windows, Server 2003, AD

Technical skills Mac OS X, preferably 10.4-10.6 Basic hardware knowledge Remote Desktop for Mac and Windows Mac/PC Support Engineer –Mac OSX, ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: