-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-319A
Apple Updates for Multiple Vulnerabilities
Original release date: November 15, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X version 10.3.x (Panther) and version 10.4.x (Tiger)
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X is affected by multiple vulnerabilities. Apple has
released Mac OS X 10.4.11 and Security Update 2007-008 to address
these vulnerabilities, the most serious of which may allow a remote
attacker to place and run malicious programs on your computer.
Solution
Install an Update
Install Mac OS X 10.4.11 or Apple Security Update 2007-008 through
Apple Update.
Description
Apple Mac OS X is affected by multiple vulnerabilities. Some of
these vulnerabilities could allow an attacker to run malicious
programs on your computer.
For more technical information, see US-CERT Technical Alert
TA07-319A.
References
* US-CERT Technical Cyber Security Alert TA07-319A -
<http://www.us-cert.gov/cas/techalerts/TA07-319A.html>
* Vulnerability notes for Apple Security Update 2007-008 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple_2007_008>
* About the security content of Mac OS X 10.4.11 and Security Update
2007-008 - <http://docs.info.apple.com/article.html?artnum=307041>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-319A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-319A Feedback VU#498105" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
November 15, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRzx8HfRFkHkM87XOAQJzjQf/Z8m2Tsa4ymM/H+lJhl7hibayUaAbDxts
VfI5Mpd3bSIJdTxyNBexhhHjyH/MBumvPMtc6g/5yJ8cntj/WYhx0xsRQ3hV1Q8/
Te11Wk4AO0CDW6J0FHlHQY8f2/xtneIcj4AG6e/iDiX4wyhaAxpzPWo53cf2de0r
1JRQUMf8GGWyUr2Rt+8p73MCk2RoZnEjoDKkNGzNOrhJvBqbd+NK/ffqTgjfplBy
eVLwcW6f+NKCaLV2E3z62v3HFvuHxTkiEMLXoOirMb1XKo8R0KypnpFnKd9zA2cp
PZdY/O6tu7U6N7ZUbhgHYtPhE5WerTzgEkcaPv0osCdEaHO39WTEig==
=ogeK
-----END PGP SIGNATURE-----
