// MacSecurity.net

2009 April 28 -- "iBotNet / iServices Trojan Horse"


2008 December 3 -- "A third variant of the RSPlug Trojan has appeared online..."


2008 November 24 -- "OSX.Lamzev.A (A.K.A. OSX.TrojanKit.Malez)"


2008 November 13 -- APPLE-SA-2008-11-13 Safari 3.2

Safari 3.2 is now available and addresses the following issues:

Safari
  CVE-ID:  CVE-2005-2096
  Available for:  Windows XP or Vista
  Impact:  Multiple vulnerabilities in zlib 1.2.2
  Description:  Multiple vulnerabilities exist in zlib 1.2.2, the most
  serious of which may lead to a denial of service. This update
  addresses the issues by updating to zlib 1.2.3. These issues do not
  affect Mac OS X systems. Credit to Robbie Joosten of
  bioinformatics@school, and David Gunnells of the University of
  Alabama at Birmingham for reporting these issues.

Safari
  CVE-ID:  CVE-2008-1767
  Available for:  Windows XP or Vista
  Impact:  Processing an XML document may lead to an unexpected
  application termination or arbitrary code execution
  Description:  A heap buffer overflow issue exists in the libxslt
  library. Viewing a maliciously crafted HTML page may lead to an
  unexpected application termination or arbitrary code execution.
  Further information on the patch applied is available via
  http://xmlsoft.org/XSLT/ This issue does not affect Mac OS X systems
  that have applied Security Update 2008-007. Credit to Anthony de
  Almeida Lopes of Outpost24 AB, and Chris Evans of the Google Security
  Team for reporting this issue.

Safari
  CVE-ID:  CVE-2008-3623
  Available for:  Windows XP or Vista
  Impact:  Visiting a maliciously crafted website may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A heap buffer overflow exists in CoreGraphics' handling
  of color spaces. Viewing a maliciously crafted image may lead to an
  unexpected application termination or arbitrary code execution. This
  update addresses the issue through improved bounds checking. Credit:
  Apple.

Safari
  CVE-ID:  CVE-2008-2327
  Available for:  Windows XP or Vista
  Impact:  Viewing a maliciously crafted TIFF image may lead to an
  unexpected application termination or arbitrary code execution
  Description:  Multiple uninitialized memory access issues exist in
  libTIFF's handling of LZW-encoded TIFF images. Viewing a maliciously
  crafted TIFF image may lead to an unexpected application termination
  or arbitrary code execution. This update addresses the issue through
  proper memory initialization and additional validation of TIFF
  images. This issue is addressed in systems running Mac OS X v10.5.5
  or later, and in Mac OS X v10.4.11 systems that have applied Security
  Update 2008-006. Credit: Apple.

Safari
  CVE-ID:  CVE-2008-2332
  Available for:  Windows XP or Vista
  Impact:  Viewing a maliciously crafted TIFF image may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A memory corruption issue exits in ImageIO's handling
  of TIFF images. Viewing a maliciously crafted TIFF image may lead to
  an unexpected application termination or arbitrary code execution.
  This update addresses the issue through improved processing of TIFF
  images. This issue is addressed in systems running Mac OS X v10.5.5
  or later, and in Mac OS X v10.4.11 systems that have applied Security
  Update 2008-006. Credit to Robert Swiecki of the Google Security Team
  for reporting this issue.

Safari
  CVE-ID:  CVE-2008-3608
  Available for:  Windows XP or Vista
  Impact:  Viewing a large maliciously crafted JPEG image may lead to
  an unexpected application termination or arbitrary code execution
  Description:  A memory corruption issue exists in ImageIO's handling
  of embedded ICC profiles in JPEG images. Viewing a large maliciously
  crafted JPEG image may lead to an unexpected application termination
  or arbitrary code execution. This update addresses the issue through
  improved processing of ICC profiles. This issue is addressed in
  systems running Mac OS X v10.5.5 or later, and in Mac OS X v10.4.11
  systems that have applied Security Update 2008-006. Credit: Apple.

Safari
  CVE-ID:  CVE-2008-3642
  Available for:  Windows XP or Vista
  Impact:  Viewing a maliciously crafted image may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A buffer overflow exists in the handling of images with
  an embedded ICC profile. Opening a maliciously crafted image with an
  embedded ICC profile may lead to an unexpected application
  termination or arbitrary code execution. This update addresses the
  issue by performing additional validation of ICC profiles in images.
  This issue does not affect Mac OS X systems that have applied
  Security Update 2008-007. Credit: Apple.

Safari
  CVE-ID:  CVE-2008-3644
  Available for:  Mac OS X v10.4.11, Mac OS X v10.5.5, Windows XP or Vista
  Impact:  Sensitive information may be disclosed to a local console user
  Description:  Disabling autocomplete on a form field may not prevent
  the data in the field from being stored in the browser page cache.
  This may lead to the disclosure of sensitive information to a local
  user. This update addresses the issue by properly clearing the form
  data. Credit to an anonymous researcher for reporting this issue.

WebKit
  CVE-ID:  CVE-2008-2303
  Available for:  Mac OS X v10.4.11, Mac OS X v10.5.5, Windows XP or Vista
  Impact:  Visiting a maliciously crafted website may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A signedness issue in Safari's handling of JavaScript
  array indices may result in an out-of-bounds memory access. Visiting
  a maliciously crafted website may lead to an unexpected application
  termination or arbitrary code execution. This update addresses the
  issue by performing additional validation of JavaScript array
  indices. Credit to SkyLined of Google for reporting this issue.

WebKit
  CVE-ID:  CVE-2008-2317
  Available for:  Mac OS X v10.4.11, Mac OS X v10.5.5, Windows XP or Vista
  Impact:  Visiting a maliciously crafted website may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A memory corruption issue exists in WebCore's handling
  of style sheet elements. Visiting a maliciously crafted website may
  lead to an unexpected application termination or arbitrary code
  execution. This update addresses the issue through improved garbage
  collection. Credit to an anonymous researcher working with the
  TippingPoint Zero Day Initiative for reporting this issue.

WebKit
  CVE-ID:  CVE-2008-4216
  Available for:  Mac OS X v10.4.11, Mac OS X v10.5.5, Windows XP or Vista
  Impact:  Visiting a maliciously crafted website may lead to the
  disclosure of sensitive information
  Description:  WebKit's plug-in interface does not block plug-ins from
  launching local URLs. Visiting a maliciously crafted website may
  allow a remote attacker to launch local files in Safari, which may
  lead to the disclosure of sensitive information. This update
  addresses the issue by restricting the types of URLs that may be
  launched via the plug-in interface. Credit to Billy Rios of
  Microsoft, and Nitesh Dhanjani of Ernst & Young for reporting this
  issue.



2008 November 11 -- smcFanControl 2.1.2 Buffer Overflow Exploit & Fix


2008 November 10 -- APPLE-SA-2008-11-10 iLife Support 8.3.1

iLife Support 8.3.1 is now available and addresses the following security issues:

ImageIO
  CVE-ID:  CVE-2008-2327
  Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
  Impact:  Viewing a maliciously crafted TIFF image may lead to an
  unexpected application termination or arbitrary code execution
  Description:  Multiple uninitialized memory access issues exist in
  libTIFF's handling of LZW-encoded TIFF images. Viewing a maliciously
  crafted TIFF image may lead to an unexpected application termination
  or arbitrary code execution. This update addresses the issue through
  proper memory initialization and additional validation of TIFF
  images. These issues are already addressed in systems running Mac OS
  X v10.5.5. Credit: Apple.

ImageIO
  CVE-ID:  CVE-2008-2332
  Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
  Impact:  Viewing a maliciously crafted TIFF image may lead to an
  unexpected application termination or arbitrary code execution
  Description:  A memory corruption issue exits in the handling of TIFF
  images. Viewing a maliciously crafted TIFF image may lead to an
  unexpected application termination or arbitrary code execution. This
  update addresses the issue through improved processing of TIFF
  images. This issue is already addressed in systems running Mac OS X
  v10.5.5. Credit to Robert Swiecki of Google Security Team for
  reporting this issue.

ImageIO
  CVE-ID:  CVE-2008-3608
  Available for:  iLife 8.0 or Aperture 2, on Mac OS v10.4.9 through v10.4.11
  Impact:  Viewing a large maliciously crafted JPEG image may lead to
  an unexpected application termination or arbitrary code execution
  Description:  A memory corruption issue exists in ImageIO's handling
  of embedded ICC profiles in JPEG images. Viewing a large maliciously
  crafted JPEG image may lead to an unexpected application termination
  or arbitrary code execution. This update addresses the issue through
  improved processing of ICC profiles. This issue is already addressed
  in systems running Mac OS X v10.5.5. Credit: Apple.


2008 October 31 -- "OSX.RSPlug.A Trojan Horse"


2008 October 14 -- "Privacy issues with Flash cookies"


2008 October 10 -- "GPU acceleration for WPA cracking"


2008 September 16 -- "Potential code execution vulnerabilities in Illustrator CS2"


2008 August 18 -- "MobileMe and (lack of) encryption"

2008 August 8 -- "It's a Core Location access blacklist, not an 'iPhone 
application deletion' list"

2008 August 6 -- "More ways to protect yourself from phishing scams"


2008 August 6 -- "iRK (iRootKit) presented at Black Hat 2008 by Jesse D'Aguanno"


2008 July 31 -- Security Update 2008-005


2008 July 22 -- "Mac virus for sale?"


2008 July 8 -- "Apple fails to patch critical exploited DNS flaw"


[restoration from archives... pending...]