-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-109A
Apple Updates for Multiple Vulnerabilities
Original release date: April 19, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.x (Panther) and version 10.4.x (Tiger)
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X is affected by multiple vulnerabilities. Apple has
released Security Update 2007-004 to address these vulnerabilities,
the most serious of which may allow a remote attacker to place and
run malicious programs on your computer.
Solution
Install an Update
Install Apple Security Update 2007-004 through Apple Update.
Description
Apple Mac OS X is affected by multiple vulnerabilities. Some of
these vulnerabilities could allow an attacker to run malicious
programs on your computer.
For more technical information, see US-CERT Technical Alert
TA07-109A.
References
* US-CERT Technical Cyber Security Alert TA07-109A -
<http://www.us-cert.gov/cas/techalerts/TA07-109A.html>
* Vulnerability notes for Apple Security Update 2007-004 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple_2007-004>
* About the security content of Mac OS X 10.4.9 and Security Update
2007-004 - <http://docs.info.apple.com/article.html?artnum=305391>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-109A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-109A Feedback VU#312424" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
April 19, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRifo4+xOF3G+ig+rAQIeqAgAhS0Xgr+Idpc9flJpmJCMUoHRfPEMRjye
4+FK+Y9atIl1MrKuHkgAOgoM61r0gpt/AOaL7Rkgxvx2KEy/3IMv3U6lrVjCdA9Y
rB2cGubEli1u+vlD9vl6V95QXJEeDykLgoRG/+wztXK2ts/FOebAMfRTTpuMnqAB
64tujsYycJQXA11Munys+uN175WXKNTcw4IKEkoqy0WmYG94NWMsj5Dmtq06dwXa
NkFsXr7vqm1TGZkWH4zRm+HaXY0Vyt57Ry16alqQ2577a7sgxnAkNewkCY+3cJuA
yFWm44aZJ8LdwPIMuyXAKaappVhuVq4CQGoJuBqF/qAGBlevy4j+nA==
=aCww
-----END PGP SIGNATURE-----
