-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-072A
Apple Updates for Multiple Vulnerabilities
Original release date: March 13, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.x (Panther) and version 10.4.x (Tiger)
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X is affected by multiple vulnerabilities. Apple has
released Security Update 2007-003 to address these vulnerabilities,
the most serious of which may allow a remote attacker to place and
run malicious programs on your computer.
Solution
Install an Update
Install Apple Security Update 2007-003 through Apple Update.
OS X 10.4 users should upgrade to 10.4.9 to obtain the security
fixes in Apple Security Update 2007-003.
Description
Apple Mac OS X is affected by multiple vulnerabilities. Some of
these vulnerabilities could allow an attacker to run malicious
programs on your computer.
For more technical information, see US-CERT Technical Alert
TA07-072A.
References
* US-CERT Technical Cyber Security Alert TA07-072A -
<http://www.us-cert.gov/cas/techalerts/TA07-072A.html>
* Vulnerability notes for Apple Security Update 2007-003 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple_2007-003>
* About the security content of Mac OS X 10.4.9 and Security Update
2007-003 - <http://docs.info.apple.com/article.html?artnum=305214>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-072A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-072A Feedback VU#449440" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
March 13, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRfdHtuxOF3G+ig+rAQLpBQf9E2qFd1gyYYhYe/CRDHS06YttHsh87R8n
n/pcC/0tZXnbeB7sx6d2kjfSYgHueCRjCX3qvpDyA0tPXfKQ4mGY4ZLG83zDAgEP
prpwOv65NiQsOBTGY18b8Ru5zCGtOfHDmY0e4IHlmrcEhcuW9I4n1MyyvJ1dONIl
byiRc1s+eyrmthfoTycuApUTWCVzw30BFg6RX7jOOl76o4ibznqMEgaiYElgHbNm
dY0RzX2+NSPaKIYdOHfN1o7hedBAFyLSwNEQFugi0JgKKJ1RjeG00PwkkgK2Hq3Z
CYKBxaVZ1aCBpKvNKXXVs3cyQAhe9JK6WE+IWz5DrPV+JHAmEmFx6g==
=1ATS
-----END PGP SIGNATURE-----
