SillyDog701

[Antony]

Apple released a Security Update 2006-007 for client and server versions of Mac OS X 10.3.9 and Mac OS X 10.4.8 today.

The "[sdt=12438]iAdware[/sdt]" proof-of-concept adware issue has been addressed.

Apple recommended all users install this security update.

Security Update 2006-007 for Mac OS X 10.4.8 Client Intel
Security Update 2006-007 for Mac OS X 10.4.8 Client PPC
Security Update 2006-007 for Mac OS X 10.4.8 Server Universal
Security Update 2006-007 for Mac OS X 10.4.8 Server PPC
Security Update 2006-007 for Mac OS X 10.3.9 Client
Security Update 2006-007 for Mac OS X 10.3.9 Server

Security Update 2006-007 is recommended for all users and improves the security of the following components:

AirPort
ATS
CFNetwork
Finder
Font Book
Font Importer
Installer
OpenSSL
PHP
PPP
Samba
Security Framework
VPN
WebKit
gnuzip
perl

For detailed information on this Update, please visit Apple security updates website.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en) AppleWebKit/418.9 (KHTML, like Gecko) Safari/419.3

[J-M]

This update has been assigned to Critical Risk FrSIRT advisory at
http://www.frsirt.com/english/advisories/2006/4750

This advisory lists 15 vulnerabilities in a detailed way and additionally several other vulnerabilities reported earlier (in gzip, ClamAV, OpenSSL, Perl, PHP, and Samba).

Fixed a typo/J-M

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8

[J-M]

Highly Critical (4/5) Secunia advisory is here, in turn:
http://secunia.com/advisories/23155/

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8

[Antony]

From some forums, people reported that this Security Update addressed zero-day Mac OS X flaw as reported by Cnet and Secunia SA23012. I failed to find the matching reference.

"Mac OS X com.apple.AppleDiskImageController fails to properly handle corrupted DMG (disk image) image structures, leading to an exploitable memory corruption condition with potential kernel-mode arbitrary code execution by unprivileged users," wrote the researcher, who goes by the initials "LMH."

Although Secunia rated it as "Highly critical", this corruption vulnerability can be easily avoided by disabling the setting "open safe files after downloading" in Safari's preferences. (SillyDog701 noted that Secunia has been over-exaggerated the critical levels in the past.)

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0