OS X :: Apple Releases Mac OS X Security Update To Patch PDF Exploit
Aug 24, 2010
Apple released a Mac OS X security update Tuesday that fixes a critical PDF vulnerability.The update, labeled Security Update 2010-005, addresses a "heap buffer overflow" in the way CoreGraphics handles PDF files. The vulnerability could allow "unexpected application termination or arbitrary code execution" through a malicious PDF file.
It is unclear whether this fix is related to the PDF exploit on iOS 4 that allowed hackers to jailbreak the iPhone. Apple released an update on August 11 that addressed the iOS PDF exploit.Security Update 2010-005 also patches a "stack buffer overflow" that would allow arbitrary code execution through a malicious embedded font. Both the PDF and the font vulnerabilities are fixed through "improved bounds checking."
Also included in the update are several routine fixes to network security flaws.The update affects Mac OS X Server 10.5, Mac OS X 10.5.8 , Mac OS X Server 10.6 , and Mac OS X 10.6.4.
View 19 Replies
ADVERTISEMENT
Apr 16, 2008
Apple on Wednesday afternoon released version 3.1.1 of its Safari web browser to address a handful of security issues, including one widely publicized vulnerability that allowed a MacBook Air to be compromised during a recent security conference.
The 39MB release, available for both Macs and Windows PCs, is recommended for all Safari users and includes improvements to stability, compatibility and security.
Specifically, Apple said the update patches four security issues, including a heap buffer overflow that existed within the browser's WebKit framework for handling JavaScript regular expressions.
The issue was reported by Charlie Miller, who discovered and exploited the vulnerability on a MacBook Air to win a $10,000 prize at last month's CanSecWest security conference.
The Safari 3.1.1 update also addressed a second issue within WebKit's handling of URLs containing a colon character in the host name. By exploiting that vulnerability, a hacker could use a maliciously crafted URL to lead a cross-site scripting attack, Apple said.
Two other issues with the Safari application itself were also addressed, though they concerned only the PC version of the browser. One of those issues made it possible for a maliciously crafted website to control the contents of a user's address bar, while the other made it possible for maliciously crafted website to cause arbitrary code execution or the Safari application to unexpectedly quit.
View 19 Replies
View Related
Aug 17, 2010
Apple on Tuesday released Snow Leopard Graphics Update, a patch for Mac OS X 10.6 that is said to improve performance and reliability of popular titles like StarCraft II and Portal. The 69.2MB update was released by Apple Tuesday afternoon. It is available from the company's support site, or via Software Update. It requires Mac OS X 10.6.4. According to Apple, the software update contains performance and stability fixes for graphics applications, including fixes that: address frame rate issues occurring in Portal and Team Fortress 2 on certain Macs resolve an issue that could cause aperture 3 or StarCraft II to unexpectedly quit or become unresponsive.
The update addresses framerate issues on the titles Portal and Team Fortress 2 for the late 2009 and mid 2010 iMac and Mac mini; early 2009 Mac Pro; early 2009 and mid 2010 MacBook; and mid-2010 MacBook Pro 15- and 17-inch models. The update also resolves an image corruption issue that may occur when disconnecting and reconnecting external displays while the system is running. Valve, the maker of Portal, Team Fortress 2 and the Steam gaming client for Mac, said in June that it was working with Apple to improve the performance of games running in Mac OS X. The company said that improved drivers from Apple would have the greatest impact on performance. "We are making a lot of progress identifying specific issues that need work inside the game and inside OpenGL and drivers," Rob Barris of Valve said at the time. "Apple, ATI and Nvidia are all involved."[ View this article at AppleInsider.com ]
View 39 Replies
View Related
Nov 2, 2007
Apple really did it. It's a miracle. Nuff said. If it works I'll retract all griping about Apple.
View 39 Replies
View Related
Feb 12, 2009
Mac OS X 10.5 Security Update 2009-001
[URL]
Java for Mac OS X 10.5 Update 3
[URL]
View 3 Replies
View Related
Apr 12, 2012
I have updated my pre-Intel Mac as far as I could go, using OS 10.5.8. Is there a security patch for this OS? I have 2 Macs of the same vintage using this OS.
Info:
Mac Pro, Mac OS X (10.5.8)
View 2 Replies
View Related
Mar 26, 2012
The last security update I downloaded maybe a month ago totally wiped out a 10 Gb encrypted .dmg file I made with Disk Utility. Disk Utility can't find it. It's gone. Is there a way to recover it?
Info:
PowerBook G4 (17-inch Double Layer SD), Mac OS X (10.6.8)
View 10 Replies
View Related
Apr 14, 2010
It says here on PCMag that we need to install a 256MB patch. So make sure you do it!
View 1 Replies
View Related
Sep 30, 2010
Does anyone think Apple will release updated notebooks any time in the near future? I know anything we come up with will purely be speculation, but sometimes Apple tends to follow trends. My 17" i5 MBP was just replaced with a gift card, and I'm wondering if I should wait for a bit (Apple had a Mac event in October to announce the unibody) or go ahead and get what I want now. I suppose I can always sell it later if something THAT much better is released.
View 10 Replies
View Related
Sep 22, 2009
Apple this week released new drivers for HP printers in its latest operating system, Mac OS X 10.6 Snow Leopard. The file, labeled version 2.2., is a 383MB download available from Apple. A number of HP printers, including Photosmart, OfficeJet, DeskJet and LaserJet models, are affected by the driver update. A complete list with numerous HP printers is listed on Apple's Web site. The update requires Mac OS X 10.6.1 or later.
Since the release of Snow Leopard, Apple has advertised new printer-related features in the operating system upgrade. Apple's Software Update will automatically provide you with third-party printer software and updates, "Nearby Printers" is a list of available printers that will appear right inside your printer dialog box, and you can simply connect a USB printer and the print queue will be automatically created.
View 8 Replies
View Related
Apr 2, 2012
Will Apple patch its version of Java ? Oracle patched it in Feburary but nothing yet from [url]
Info:
Mac OS X (10.7.3)
View 5 Replies
View Related
Nov 17, 2008
Apple has released a software update to address an issue where trackpad clicks would randomly go unrecognized on its latest notebook offerings: the MacBook (Late 2008) and MacBook Pro (Late 2008)."This firmware update addresses an issue where trackpad clicks may not be recognized on MacBook (13-inch, Aluminum, Late 2008) and MacBook Pro (15-inch, Late 2008) computers," the company said. Installing the updateYou can download and install the update from the Software Update mechanism built into Mac OS X. Alternatively, you can download the update manually and follow a two part process: installing the firmware update [Download - 923KB] application onto your hard drive and using the firmware update application to update your trackpad's firmware.
View 24 Replies
View Related
Feb 24, 2009
Apple on Tuesday announced a public beta of Safari 4, a new version of its share-gaining web browser that packs a powerful new JavaScript engine and support for the latest web standards. Dubbed "Nitro," the engine in Safari 4 is said to run JavaScript 4.2 times faster than Safari 3. Other new features include Top Sites, for a visual preview of frequently visited pages; Full History Search, to search through titles, web addresses and the complete text of recently viewed pages; Cover Flow, to easily flip through web history or bookmarks; and Tabs on Top, to make tabbed browsing easier and more intuitive. "Apple created Safari to bring innovation, speed and open standards back into web browsers, and today it takes another big step forward," said Philip Schiller, Apple's senior vice president of Worldwide Product Marketing. "Safari 4 is the fastest and most efficient browser for Mac and Windows, with great integration of HTML 5 and CSS 3 web standards that enables the next generation of interactive web applications."
Performance
In terms of performance, Apple claims Safari 4's new Nitro JavaScript engine executes JavaScript up to 30 times faster than Microsoft's IE 7 and more than three times faster than Firefox 3. It's also said to load HTML web pages three times faster than IE 7 and almost three times faster than Firefox 3. Safari 4 also represents the latest chapter in Apple's efforts to maintain its leadership role in defining and implementing web standards, with built in support for HTML 5 and CSS 3 -- two technologies critical in supporting an entirely new class of web applications that feature rich media, graphics and fonts. Safari 4 Beta tracks the sites you browse and ranks your favorites, presenting up to 24 thumbnails on a single page.
Specifically, the Cupertino-based company said the new browser includes HTML 5 support for offline technologies so web-based applications can store information locally without an Internet connection. A recent technology demonstration by Google highlighted the advantages this technology when it showed off a version of Gmail running offline on the iPhone's mobile version of Safari, which already includes support for some HTML 5 standards. Apple also said that Safari 4 is the first browser to support advanced CSS Effects that enable highly polished web graphics using reflections, gradients and precision masks. Similarly, it's said to be the first browser to pass the Web Standards Project's Acid3 test, which examines how well a browser adheres to CSS, JavaScript, XML and SVG web standards that are specifically designed for dynamic web applications.
Cover Flow offers a highly visual way of reviewing your site history and bookmarked sites, presenting full-page previews. Safari for Mac, Windows, iPhone and iPod touch are all built on Apple's WebKit, which the company has billed the "world's fastest and most advanced browser engine." Apple developed WebKit as an open source project to create the world's best browser engine and to advance the adoption of modern web standards. Most recently, WebKit led the introduction of HTML 5 and CSS 3 web standards and is known for its fast, modern code-base. Some of the industry's newest browsers are based on WebKit including Google Chrome, the Google Android browser, the Nokia Series 60 browser and Palm webOS. Safari 4 relocates the tab bar to the top of the browser window to provide "more room for you to enjoy the sites you're reading".
New features
Safari 4 also includes a handful of new user interface features, including: Top Sites, a display of frequently visited pages in a wall of previews so users can jump to their favorite sites with a single click; Full History Search, where users search through titles, web addresses and the complete text of recently viewed pages to easily return to sites they've seen before; Cover Flow, to make searching web history or bookmarks "as fun and easy as paging through album art in iTunes;" Tabs on Top, for better tabbed browsing with easy drag-and-drop tab management tools and an intuitive button for opening new ones; Smart Address Field, that automatically completes web addresses by displaying an easy-to-read list of suggestions from Top Sites, bookmarks and browsing history; Smart Search Field, where users fine-tune searches with recommendations from Google Suggest or a list of recent searches; Full Page Zoom, for a closer look at any website without degrading the quality of the site's layout and text; built-in web developer tools to debug, tweak and optimize a website for peak performance and compatibility; and a new Windows-native look in Safari for Windows, that uses standard Windows font rendering and native title bar, borders and toolbars so Safari fits the look and feel of other Windows XP and Windows Vista applications. In total, Apple claims over 150 features in Safari 4. The public beta is available for download here.
[ View this article at AppleInsider.com ]
View 39 Replies
View Related
Feb 14, 2009
I have problems since applying the latest security Update 2009-001 and Java 10.5 Update 3, I have 10.5.6 on the new unibody 2.4ghz and have completely lost the ability to connect to my wireless access point which is an apple airport extreme base station.
I can sometimes se the base station but cannot connect to it and sometimes cannot see it at all. I have three other apple computers at home all less then a year old running the same build of 10.5.6 but have not updated them and they all are fine.
This one was perfect untill I applied the update.
The machine I am having problems with is partitioned with windows 7 beta on it which has no problems connecting to the base station, which indicates that its not a hardware problem but more then likely the update which is causing the problem.
Is there a way to uninstall the last update or delete it? Any one with a similar problem or know how I can fix it, I have googled but cannot seem to find anyone with similar problems.
View 10 Replies
View Related
Apr 7, 2012
why don't java security update show up in software update? macbook pro with mac os lion
View 2 Replies
View Related
Apr 7, 2012
My wife macbook pro os 10.7 don't show the java security update in software update
View 2 Replies
View Related
Jun 8, 2009
Apple on Monday released a finalized version of Safari 4, which the company is billing as the "world's astest and most innovative web browser." Available for Mac and Windows PCs and introduced as a beta in February of this year, Safari 4 features the Nitro engine which runs JavaScript up to 4.5 times faster than its predecessor.
"The successful beta release helped us fine tune Safari 4 into an even better, faster version that customers are going to love," said Philip Schiller, Apple's senior vice president of Worldwide Product Marketing. "Safari is enjoyed by 70 million users worldwide and with its blazing fast speed, innovative features and support for modern web standards, it's the best browser on any platform."............
View 39 Replies
View Related
Feb 12, 2009
how to find Java update and Security Update for Mac OS?
Just updated on my MBP and Mac Pro.
View 1 Replies
View Related
Dec 16, 2009
I've always wonder this, Does anyone know if the combo update has a security update as well?
View 3 Replies
View Related
Dec 18, 2008
Ok so today I was on my computer and I noticed on my Xchat Aqua IRC client I kept disconnecting on one of the servers I was on. I checked my internet thinking it was my ISP dropping and it was running fine. I checked my computer and it was ok because I had AIM msn and all that running. So i get on my other computer and use a browser based IRC client to see if it does it there and when my xchat disconnected I didnt disconnect on the browser. I then noticed.. there was a $%&%$# who must have found an exploit threw DCC for xchat because he was typeing things like "DCC send tralala 0 0 0" and I would disconnect.
So my question is did anyone know about this or know how to fix it? because its really annoying and I cant find anything to stop him.
View 1 Replies
View Related
Mar 29, 2009
[URL]. Proof-of-concept exploit code has been posted online for six kernel vulnerabilities, five of which affect Mac OS X 10.5.6, the most current version of Apple's operating system software. The vulnerabilities are proofs of concept that demonstrate the code can take control of a machine, either via creating a privilege escalation modifying the users or launching DoS local attacks against the PC," he said in an e-mail. "The proof of concept code has the ability to create a new system volume, call to some OS functions, change the user ID, and so on, without administrative privileges.
View 6 Replies
View Related
May 20, 2009
I have installed the Safari update three times already and it is still suggesting the update. Is anyone else having this problem?
View 4 Replies
View Related
Mar 18, 2008
Moderator Note: Thread closed at request of original poster, who has made another post with more detail on this issue here. Warning: All working fine the last month until security update 3-18-08 totally wrecked system - cannot boot - recommend cloning to separate disk before attempting. Never had this occur with mac update. Many times with Windows.
View 9 Replies
View Related
Dec 18, 2008
I have just installed the latest securtiy update, clicked restart and normal shut down, start up ok, apple in middle of the screen and then the sun burst icon just spins and spins nothing further than that. have tried restarting several times but it always stops in the same place. It's had a half hour to think about this now and nothing, so off to mac doctor tomorrow. [URL:...]
View 2 Replies
View Related
Mar 21, 2009
I keep getting this error
"You cannot install Security Update 2009-001 on this volume. This volume does not meet the requirements for this update."
View 4 Replies
View Related
Apr 17, 2012
I just updated java for MAC OS X 10.6 which is a security update. I have no idea whether I am using java applets in my web browser. I am unwilling to disable the java web plugin in my web browser until I know what I'm giving up.
Info:
MacBook Pro (15-inch Early 2011), Mac OS X (10.6)
View 3 Replies
View Related
May 25, 2012
I just received a Security Update notification and because of all the recent hoo-ha about malware/Adobe Flash Player, I'm unsure about downloading these two items. This is mainly because I've not received these before:
Flashback Removal Security Update
Leopard Security Update 2012
Info:
macBook, Mac OS X (10.5.8)
View 14 Replies
View Related
Sep 18, 2009
Ran Software Update on mother's iMac (20"/2.0GHZ/1GB/250GB - at least 200GB free, running 10.4). Many updates (Safari, Flash, Security Update, whose number I did not get...). Message that one update could not be installed, did not say which one. Computer will no start up (grey screen).
Started up from Disk 1, repaired Permissions, ran Disk Repair, which indicated no repairs needed. Removed only peripheral (ADSL modem) & ran Safe Boot; it stalls. Last four lines are.
View 2 Replies
View Related
Sep 27, 2010
My mac will not automatically detect displays, and even sometimes requires a restart. I've reset SMC, PRAM, repaired permissions, and cleared the caches.
View 11 Replies
View Related
Sep 29, 2010
Software Update just prompted me with an update for iTunes and a Security Update without thinking about it since they are apple updates I did them. After restarting every single application that utilizes a SSL certificate from Keychain is prompting me saying that the SSL Certificate has an invalid issuer. This includes SSL certificates from Apple themselves ( mobile me, apple.com etc.. ). Anyone else having this issue or is it just my computer being massively screwy?
View 1 Replies
View Related
