-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-047A
Apple Updates for Multiple Vulnerabilities
Original release date: February 16, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.9 (Panther) and version 10.4.8 (Tiger)
* Apple iChat
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X and iChat are affected by multiple vulnerabilities.
Apple has released Security Update 2007-002 to address these
vulnerabilities, the most serious of which may allow a remote
attacker to place and run malicious programs on your computer.
Solution
Install an Update
Install Apple Security Update 2007-002 through Apple Update.
Description
Apple Mac OS X and iChat are affected by multiple vulnerabilities.
Some of these vulnerabilities could allow an attacker to run
malicious programs on your computer.
For more technical information, see US-CERT Technical Alert
TA07-047A.
References
* US-CERT Technical Cyber Security Alert TA07-047A -
<http://www.us-cert.gov/cas/techalerts/TA07-047A.html>
* Vulnerability Notes for Apple Security Update 2007-002 -
<http://www.kb.cert.org/vuls/byid?searchview&query=Apple-2007-002>
* About the security content of Security Update 2007-002 -
<http://docs.info.apple.com/article.html?artnum=305102>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-047A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-047A Feedback VU#240880" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
February 16, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRdZEw+xOF3G+ig+rAQLpsgf9F+wgNL8Yrq+4Hfa/tV3cmZy7Y0mzRoKn
ulwTdsmxrYMzfrJB2UvgYR2cg+4NeUCwNagw6HnoVUe1o6i0+M8IRNGWZicqdRaV
yTi1LStH5be+araKlQOLptSEaGKvAyeEhrCTkaYzO+hgmr8jU9BeUauBt1CEe4SP
sXYAjySHdazuQlu2kZWp0XgVgLY0fDIQMHmN2MfdnJBd/3ZjvoXPtgq9JmCLASdK
YuXBsat7P3caOIXFqh+mjuWC4AjFutvTg889Funpd703O/mDyB3wXfhVaoEPxtIs
HcxoWo4FKrA9zxTiGrlfWdD8QR763Z+VZsrkDM1fzHd/tJu8bxI3jw==
=r3hD
-----END PGP SIGNATURE-----
