MoAB spots another format string vulnerability

Stephen Withers
Saturday, 27 January 2007 15:29

Your IT - Home IT

Mac OS X's Installer utility has a format string bug that can be triggered by maliciously crafted package file names, according to the Month of Apple Bugs project.

"This is another issue related with the now infamous NSRunAlertPanel() and related functions. Actually, there are dozens of issues like these in nearly every Mac OS X application", wrote LMH, adding that it could be exploited in conjunction with other vulnerabilities.

"Under certain circumstances this can be useful and thus arbitrary code execution can't be considered 'not possible' right away".

No workaround is offered.