| MoAB maintains pressure on Apple |
|
| by Stephen Withers | |
| Wednesday, 24 January 2007 | |
|
The Month of Apple Bugs project is maintaining its recent focus on software actually emanating from the Cupertino-based company with the disclosure of a flaw in QuickDraw, the venerable graphics toolbox that dates back to the earliest days of the Macintosh.
Featured Whitepaper
5 Best Practices for Smartphone Support
MoAB's LMH has discovered that a malformed PICT image can be used to corrupt the contents of memory, potentially allowing the execution of arbitrary code although that "can't be stated as [a] currently viable condition." The danger is that users could be induced to open a malicious web page that includes a PICT file containing the exploit. This exploit is reminiscent of previous vulnerabilities found in software used by Windows and Mac OS X to display other graphics formats including TIFF and BMP. The suggested workaround is to "Use RCdefaultApp to disable any file and MIME type associations related with PICT files", thus preventing a browser or other application from automatically opening PICT files. RCDefaultApp is a free utility from Rubicode.{moscomment} |
| < Next story in category | Previous story in the category > |
|---|






Tags



