Over 40 Security Fixes in Mac OSX 10.5.3

Apple released security updates that are a must install for administrators. The fixes address local and remote attacks that can occur in several applications including the following:

Address Book
AirPort
Automator
ICal
IChat
Mail
Parental Controls
Spaces
Time Machine
Voice Over

The core vulnerabilities in the fixes are AppKit code execution, Help Viewer buffer overflow vulnerability and CoreGraphics code execution vulnerability. These flaws could include Denial of Service Attacks (DOS) and elevation of privileges by an attacker. Administrators should backup their systems before the install.

Apple ICal 3.0.1, DOS Attack

ICal 3.0.1 allows remote CalDav servers and user assisted remote attacker to allow for DOS attack. This can result in a system crash and the posiablilty of code execution. No log in is requiered to exploit this weakness. The client interact with the remote attacker in some manner. The user must import a .ICS file from teh attacker. Currently there is no fix for this attack, make sure that your users do not import in and .ICS file from someone they do not know.

Welcome

Welcome to magmatic.com, we are just getting all our content transfered. The site should be up and running by the end of May, so check back soon.