-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA08-043B
Apple Updates for Multiple Vulnerabilities
Original release date: February 12, 2008
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X versions prior to and including 10.4.11 (Tiger) and
10.5.1 (Leopard)
These vulnerabilities affect both Intel-based and PowerPC-based Apple
systems.
Overview
Apple Mac OS X is affected by multiple vulnerabilities. Apple has
released Security Update 2008-001 and Apple Mac OS X version 10.5.2
to address these vulnerabilities, the most serious of which may
allow a remote attacker to take control of your computer.
Solution
Install an Update
Use Software Update to install Apple Security Update 2008-001 or
Apple Mac OS X version 10.5.2.
Description
Apple Mac OS X is affected by multiple vulnerabilities. These
vulnerabilities could allow an attacker to run malicious programs
on your computer, crash your computer, or access your data without
your approval.
For more technical information, see US-CERT Technical Alert
TA08-043B.
References
* US-CERT Technical Cyber Security Alert TA08-043B -
<http://www.us-cert.gov/cas/techalerts/TA08-043B.html>
* Vulnerability notes for Apple Security Update 2008-001 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple-2008-001>
* About the security content of Mac OS X 10.5.2 and Security Update
2008-001 - <http://docs.info.apple.com/article.html?artnum=307430>
* About the Mac OS X 10.5.2 Update -
<http://docs.info.apple.com/article.html?artnum=307109>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/techalerts/TA08-043B.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA08-043B Feedback VU#774345" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2008 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
February 12, 2008: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBR7H2S/RFkHkM87XOAQLGWggAj8X0ApMxGCmK+yQwu8Ff5xGLjrf8xsG2
aiVAK6Z1RWehLr/GW2M0NE7ajLEf4cwfz9MEgwSdF9HKkudGHJfHemDozNXW3U/J
MrJSm/2PfbVVSzQRgQ6cwVEGAaqTSZsb3j+0DBgJlYSQHhy3kwYV5uDVfykKwXjO
edBnZrD0R9j/DxLgmD3Bqbuv3XKqQyo1CIEUtnoyOmz4pva9iDOceEQCRUWjrSft
FkHgg9/IxMg0ZpAvzLDhKZBwrUS83m2mpjzzh09as+Qs74Xw/XDhtcvRlNwj0kkT
LkIX6Kna6Q4MRU7oNSMY2fomhXS9AylrAxB0eqDLDiTZm10DU4OwuQ==
=q38q
-----END PGP SIGNATURE-----
