Marc Erickson

Critical: Extremely critical
Impact: Security Bypass, System access
Where: From remote
Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.
1) Under certain circumstances, it is possible for JavaScript to bypass the same-origin policy via specially crafted archives.
2) A boundary error in Mail can be exploited to cause a buffer overflow via a specially [...]

Brief Description
With Windows Media Components for QuickTime, by Flip4Mac, you can play Windows Media files (.wma and .wmv) directly in QuickTime Player and view Windows Media content on the Internet using a Web browser.

Bill Brenner writes on SearchSecurity.com,
Apple Computer Inc. released a bushel of patches for Mac OS X Tuesday, fixing 13 flaws attackers could exploit to bypass security restrictions, gain unauthorized system access, compromise sensitive data and launch malicious code.
Cupertino, Calif.-based AV giant Symantec Corp. sent customers of its DeepSight Threat Management System an e-mail bulletin Tuesday, [...]

Secunia Advisory: SA17368
Critical: Less critical
Impact: Security Bypass, Exposure of system information, Exposure of sensitive information
Where: Local system
Solution Status: Vendor Patch
OS: Apple Macintosh OS X
Apple has issued an update for Mac OS X. This fixes some vulnerabilities and a security issue, which can be exploited by malicious, local users to bypass certain security restrictions or to [...]

“Secunia Advisory: SA16920
Critical: Highly critical
Impact: Security Bypass, Cross Site Scripting, Exposure of sensitive information, Privilege escalation, System access
Where: From remote
Solution Status: Vendor Patch
OS: Apple Macintosh OS X

“Secunia Advisory: SA16449
Critical: Highly critical
Impact: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of sensitive information, Privilege escalation, DoS, System access
Where: From remote
Solution Status: Vendor Patch
Apple has issued a security update for Mac OS X, which fixes more
than 40 vulnerabilities….
Solution: Apply Security Update 2005-007.
Mac OS X 10.3.9 Client:
http://www.apple.com/support/downloads/securityupdate2005007macosx1039client.html
Mac OS X 10.3.9 Server:
http://www.apple.com/support/downloads/securityupdate2005007macosx1039server.html
Mac OS X 10.4.2 [...]

Secunia Advisory: SA16047
Critical: Moderately critical
Impact: Manipulation of data, DoS
Where: From remote
Solution Status: Vendor Patch
Two vulnerabilities have been reported in Mac OS X, which can be exploited by malicious people to cause a DoS (Denial of Service) or replace system widgets on a user’s system.
Solution: Apply patches.

“Secunia Advisory: SA15481
Critical: Highly critical
Impact: Unknown, Security Bypass, Exposure of system information, Exposure of sensitive information, Privilege escalation, DoS, System access
Where: From remote
Solution Status: Vendor Patch
OS: Apple Macintosh OS X
Apple has issued a security update for Mac OS X, which fixes various vulnerabilities….

Update - it’s now on the Apple site: Apple to Use Intel Microprocessors Beginning in 2006
In the New York Times this morning - free registration required to read the story:
“Steven P. Jobs is preparing to take an unprecedented gamble by abandoning Apple Computer’s 14-year commitment to chips developed by I.B.M. and Motorola in [...]

As reported by Reuters, “Apple Computer has been in talks that could lead to a decision soon to use Intel chips in its Macintosh line, according to a report published Monday.
The Wall Street Journal, citing two industry executives with knowledge of recent discussions between the companies, reported that Apple will agree to use Intel chips.
Neither [...]

Secunia Advisory: SA14974
Critical: Moderately critical
Impact: Security Bypass, Privilege escalation, DoS, System access
Where: From remote
Solution Status: Vendor Patch
OS: Apple Macintosh OS X
Software: Safari 1.x
Apple has issued an update for Mac OS X, which fixes various vulnerabilities….

“Secunia Advisory: SA14873
Critical: Moderately critical
Impact: Exposure of system information, Exposure of sensitive information
Where: From remote
Solution Status: Unpatched
Software: Camino 0.x
A vulnerability has been discovered in Camino, which can be exploited by malicious people to gain knowledge of potentially sensitive information.
For more information:
SA14820
The vulnerability has been confirmed in version 0.8.3. Other versions may also be affected.
Solution: Disable JavaScript [...]

Secunia Advisory: SA14346
Apple has acknowledged a vulnerability in Java for Mac OS X, which can be exploited by malicious people to compromise a user’s system.
For more information:
SA13271
NOTE: This does not affect releases prior to Java 1.4.2 on Mac OS X.