-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-333A
Apple Releases Security Update to Address Multiple Vulnerabilities
Original release date: November 29, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.9 (Panther) and version 10.4.8 (Tiger)
* Safari web browser
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Mac OS X, Safari, and other products are affected by multiple
vulnerabilities. Apple has released Security Update 2006-007 to
address these vulnerabilities, the most serious of which may allow
a remote attacker to place and run malicious programs on your
computer.
Solution
Install an Update
Install Apple Security Update 2006-007 through Apple Update.
Description
Mac OS X, Safari, and other products are affected by multiple
vulnerabilities. Some of these vulnerabilities could allow an
attacker to run malicious programs on your computer.
For more technical information, see US-CERT Technical Alert
TA06-333A.
References
* US-CERT Technical Cyber Security Alert TA06-333A -
<http://www.us-cert.gov/cas/techalerts/TA06-333A.html>
* About the security content of Security Update 2006-007 -
<http://docs.info.apple.com/article.html?artnum=304829>
* Vulnerability Notes for Apple Security Update 2006-007 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple-2006-007>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
* Securing Your Web Browser -
<http://www.us-cert.gov/reading_room/securing_browser/#Safari>
_________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-333A.html>
_________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA06-333A Feedback VU#191336" in the
subject.
_________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
_________________________________________________________________
Revision History
November 29, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRW3vUexOF3G+ig+rAQLH1ggAs+/as8bZmws1t7MQf7pZzV3tYi/ijNuQ
fOiY9tGziHtpCF89wEgRA+sqGdXpj16S7NoLgfGEp1wsX0NIf1LUF61Ghb2ddCI6
/U63UTYpYg9P3682ucp5Yf99t7AwYHaMWqJ1v46g/1b0C5cJFVx1RQ6+bv6tuDeE
OEFgKk2n+nbaFzt7YTnMIc4EOA9lZEC65XFyCM9ryUppmHb5Xcw+bTWJOBleHxZw
YatKMgH9kVeMj6Z8ZTyGFEsETfkCZsVT+fCL4iF+elJLauJ8G6lIEkO09Tm14ERg
KR/hqK/x4W2Yz7CdpG0Vpk1I8GIVbZybyWYX9blcV3dSks/zlXvOWg==
=nskZ
-----END PGP SIGNATURE-----
