-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA07-352A
Apple Updates for Multiple Vulnerabilities
Original release date: December 18, 2007
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X versions prior to and including 10.4.11 (Tiger) and
10.5.1 (Leopard)
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X is affected by multiple vulnerabilities. Apple has
released Security Update 2007-009 to address these vulnerabilities,
the most serious of which may allow a remote attacker to take
control of your computer.
Solution
Install an Update
Install Apple Security Update 2007-009 through Software Update.
Description
Apple Mac OS X is affected by multiple vulnerabilities. These
vulnerabilities could allow an attacker to run malicious programs
on your computer, crash your computer, access your data, or
initiate a video conference without your approval.
For more technical information, see US-CERT Technical Alert
TA07-352A.
References
* US-CERT Technical Cyber Security Alert TA07-352A -
<http://www.us-cert.gov/cas/techalerts/TA07-352A.html>
* Vulnerability notes for Apple Security Update 2007-009 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple-2007-009>
* Apple Security Update 2007-009 -
<http://docs.info.apple.com/article.html?artnum=307179>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
_________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA07-352A.html>
_________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA07-352A Feedback VU#905292" in the
subject.
_________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
_________________________________________________________________
Produced 2007 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
_________________________________________________________________
Revision History
December 18, 2007: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBR2hO5PRFkHkM87XOAQLdvAf9EogUokt11opYSyQyDOsIcY/bZJYc3GhA
BeiDtan6rHqLUjCPVuNQBSFMDQm/1V1KPzoPWLwlV4p4aSNYIIImAd7EHReIXJrE
UW6xNq0xJwqOeEY8BDGlcl93wIn6oGxt1GJzrbAeFp87W0bYmR9AORw99sNxuaQV
7gdkLZuAzPkDOJjM7QBxx6IKTvS2Foka49EviO0sFWdPCz5EJiZD1MiLw2LwUvbE
+dBJ9lQDjF06IqNpE8TnUcUGQB1jwil5pasbTBeog+QhdTgfG3GeajlmNAI1ZVb3
GHqR2TQ+/hXxtZkvsVmWlc/djGx8cm31QbmQcWkZ7P5SGemmbUzsPQ==
=7iVx
-----END PGP SIGNATURE-----
