-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA08-079A
Apple Updates for Multiple Vulnerabilities
Original release date: March 19, 2008
Last revised: --
Source: US-CERT
Systems Affected
* Apple Mac OS X
* Apple Safari for Mac and Windows
Overview
Apple Mac OS X and Apple Safari are affected by multiple
vulnerabilities. Apple has released Security Update 2008-002 and
Safari 3.1 to address these vulnerabilities, the most serious of
which may allow a remote attacker to take control of your computer.
Solution
Install an Update
Use Software Update to install Apple Security Update 2008-002 or
Safari 3.1.
Description
Apple Mac OS X is affected by multiple vulnerabilities. These
vulnerabilities could allow an attacker to run malicious programs
on your computer, crash your computer, or access your data without
your approval.
For more technical information, see US-CERT Technical Alert
TA08-079A.
References
* US-CERT Technical Cyber Security Alert TA08-079A -
<http://www.us-cert.gov/cas/techalerts/TA08-079A.html>
* Vulnerability notes for Apple Security Update 2008-002 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple_security_update_2008_002>
* About the security content of Security Update 2008-002 -
<http://docs.info.apple.com/article.html?artnum=307562>
* About the security content of Safari 3.1 -
<http://docs.info.apple.com/article.html?artnum=307563>
* Mac OS X: Updating your software -
<http://docs.info.apple.com/article.html?artnum=106704>
_________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA08-079A.html>
_________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA08-079A Feedback VU#766019" in the
subject.
_________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
_________________________________________________________________
Produced 2008 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
March 19, 2008: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBR+FiIvRFkHkM87XOAQIxVAf/ScYjb31IbAATwvPA1JpHNgQq/lUuXATt
kaTBFJBK1Ih1ZAy7ht/dh2B6ADCMeytokRGtdhEIGd74M8pPJNL2tXbP4EuhMiH9
Lis56P6HM8+wXxbGvl+fFs5MrNgxmvz++EL3LwlZlN+hR2d0J1w3Gxh/GbcPsSRa
3WvbLEpnTAXs+oDydwoe3MYGMTh9tTwj/g8rPX3t692plYVSiDV9R1a4oFKJfZEA
z6zNu9K4xfE2U6qxev87JxaJHyRv22rWk+jo2tXv3SDcnNNlMvjHaxGpQ29/xd1a
A5CcmQmDeyXHfvpL4TbCpmsIlvkbgkn69ujOg1rNHYMJWvdWlULq4A==
=Xs7c
-----END PGP SIGNATURE-----
