Australian IT JOBS : Sydney IT jobs, UNIX jobs, Linux jobs, Java jobs, ASP jobs Linux.conf.au Linux.conf.au
Technology news and Jobs arrow Telecommunications arrow Apple releases Mac OS X 10.4.8, with a little Aussie help
Apple releases Mac OS X 10.4.8, with a little Aussie help PDF Print E-mail
Written by Stuart Corner   
Monday, 02 October 2006
Apple has released an upgrade to its operating system containing fixes for numerous functional problems and a dozen security flaws, including one discovered at Queensland University of Technology

Adam Bryzak of Queensland University of Technology is credited with discovering a flaw in Safari that could allow a lock icon to be displayed when a supposedly trusted remote site is accessed using SSL. Apple explains that "Connections created using SSL are normally authenticated and encrypted. When encryption is implemented without authentication, malicious sites may be able to pose as trusted sites. In the case of Safari this may lead to the lock icon being displayed when the identity of a remote site cannot be trusted."

Information about the update http://docs.info.apple.com/article.html?artnum=304460 also details "critical vulnerabilities" in Adobe Flash Player that "may lead to arbitrary code execution when handling maliciously-crafted content". Another vulnerability meant that, by carefully crafting a corrupt JPEG2000 image, an attacker could trigger a buffer overflow which could lead to an application crash or arbitrary code execution.

Flaws in the LoginWindow, Quickdraw manager and other OS components that result in application crash, arbitrary application execution or denial of service have also been fixed.

Functionality fixes include resolution of a problem with Microsoft Word in which Word might stop responding when saving a file that uses certain OpenType fonts and an issue for Microsoft PowerPoint in which the display resolution might not change as expected after switching from a PowerPoint presentation to a different application via Command-Tab.{moscomment}



Get stories like this delivered daily - FREE - subscribe now
When you subscribe get a 12 months license for LiveProject
Valued at $99 USD


LiveWire - Desktop alerts Download the FREE iTWire desktop alert widget LiveWire - Desktop alerts


Del.icio.us!
 
< Prev   Next >
Contact , Register , Advertise with iTWire , Links , Register , About iTWire , Feedback , Post your jobs , Events , iTWire site map , Start Blogging
Industry Releases , Submit your release now , Start submitting to iTWire , How to post video