Technology news and Jobs arrow Telecommunications arrow Apple releases Mac OS X 10.4.8, with a little Aussie help
Apple releases Mac OS X 10.4.8, with a little Aussie help E-mail
by Stuart Corner   
Monday, 02 October 2006
Apple has released an upgrade to its operating system containing fixes for numerous functional problems and a dozen security flaws, including one discovered at Queensland University of Technology

Adam Bryzak of Queensland University of Technology is credited with discovering a flaw in Safari that could allow a lock icon to be displayed when a supposedly trusted remote site is accessed using SSL. Apple explains that "Connections created using SSL are normally authenticated and encrypted. When encryption is implemented without authentication, malicious sites may be able to pose as trusted sites. In the case of Safari this may lead to the lock icon being displayed when the identity of a remote site cannot be trusted."

Information about the update http://docs.info.apple.com/article.html?artnum=304460 also details "critical vulnerabilities" in Adobe Flash Player that "may lead to arbitrary code execution when handling maliciously-crafted content". Another vulnerability meant that, by carefully crafting a corrupt JPEG2000 image, an attacker could trigger a buffer overflow which could lead to an application crash or arbitrary code execution.

Flaws in the LoginWindow, Quickdraw manager and other OS components that result in application crash, arbitrary application execution or denial of service have also been fixed.

Functionality fixes include resolution of a problem with Microsoft Word in which Word might stop responding when saving a file that uses certain OpenType fonts and an issue for Microsoft PowerPoint in which the display resolution might not change as expected after switching from a PowerPoint presentation to a different application via Command-Tab.{moscomment}

Powered By Joomla Tags

Please enable JavaScript in your browser to post your comment!

 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter