-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-132A
Apple Mac Products Affected by Multiple Vulnerabilities
Original release date: May 12, 2006
Last revised --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.9 (Panther) and version 10.4.5 (Tiger)
* Apple Safari web browser
* Apple Mail
Previous versions of Mac OS X may also be affected.
Overview
Mac OS X, Safari web browser, Mail, and other products are affected
by multiple vulnerabilites. Apple has released Security Update
2006-003 to address these vulnerabilities, the most serious of
which may allow a remote attacker to place and run malicious code
on your computer.
Solution
Install an Update
Install Apple Security Update 2006-003 through Apple Update.
Disable "Open 'safe' files after downloading"
For additional protection, disable the option to "Open 'safe' files
after downloading," as specified in "Securing Your Web Browser."
Description
Mac OS X, Safari web browser, Mail, and other products are affected
by multiple vulnerabilities. Some of these vulnerabilities could
allow an attacker to run malicious programs on your computer.
For more technical information, see US-CERT Technical Alert
TA06-132A.
References
* US-CERT Technical Cyber Security Alert TA06-132A -
<http://www.us-cert.gov/cas/techalerts/TA06-132A.html>
* Securing Your Web Browser -
<http://www.us-cert.gov/reading_room/securing_browser/#Safari>
* Apple Security Update 2006-003 -
<http://docs.info.apple.com/article.html?artnum=303737>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-132A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA06-132A Feedback VU#519473" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
Aug 12, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRGTzB30pj593lg50AQJ81ggAv+M9+EFOwNt9RaWZJMlNzGqNMyn3L4mD
PXEmthQdQThCs5icMKqIZXUrFAR21/dY9T2rzKnpA9W90NHgoL5QWsTGjl1x0du6
6qLxOFOlivoWO/ZfK4Ih+QSYYI2YYaUPcxzKPktcZE75tVoeXKFvWHOyotiVO7f4
3ugHGPAFLP9uOGNKLlnCJ5HO0obv6+O7WeqIt5njhH5kQ7nLvaJ1U0PzVAW5ovNR
ddoIBWn95kPruigbmez6e5ncb1GJUJt5SVgAdhnFE1E3y+VEM+rw9TRqPvuq+yeJ
hcE+S64CmyoqReu73pmZcIaxA6hvJ9Lnm8mXtaUMQr+dxP3xDINCyw==
=0sW0
-----END PGP SIGNATURE-----
