Computerworld
Warnings sounded over serious Apple flaws
Matthew Broersma (Techworld.com)  14 March, 2006 07:41

Security company, EEye has warned of two serious bugs in Apple media software, putting both Windows and Mac OS X systems at risk.

The new reports follow a string of security warnings this year that threaten to end the widespread perception that Apple's software is relatively secure.

EEye last week reported two separate flaws affecting QuickTime and iTunes, both allowing attackers to potentially execute malicious code on a system.

Both affect Mac OS X as well as Windows NT, Windows 2000, Windows XP and Windows 2003, according to eEye, and both are rated as "high" severity. One flaw is the result of a heap overflow, and the other is caused by an integer overflow.

The company added both bugs to its roster of upcoming advisories, which alert users to flaws that have been discovered but not yet patched or publicly disclosed. EEye doesn't give details on such flaws, in order to allow users time to react and software vendors time to issue patches.

The oldest vulnerability on the list is currently a bug affecting Windows that was reported 153 days ago and hasn't yet been patched, eEye said.

Since the beginning of this year, Mac users have begun to experience a taste of the paranoia that has long afflicted Windows users. Recently, two viruses appeared targeting the OS X platform in the space of a week.

These were shortly followed by the public disclosure of code exploiting a severe OS X bug that could allow the Safari web browser to automatically execute malicious code on a system if users view a specially crafted site. The bug also affected OS X's built-in Mail e-mail client.

Antivirus vendors, who have long had difficulty selling their products to Mac users, have said attackers' new interest on the Mac is partly spurred by Apple's switch to the Intel platform. "It shows increased activity and viability for future Macintosh-based threats on the Mac OS X platform," said Ken Dunham, director of the rapid response team at iDefense, a Versign company, in a recent interview.

He pointing out that the last major Macintosh threat was the Autostart worm in 1998. "As a result, many Macintosh users are more likely to be complacent toward computer security and therefore are more likely to be vulnerable to any future threats that emerge against the Macintosh operating system," he said.

Computerworld Buyer's Guide - Vendors Matched to this Article
More about Intel, iDefense, Apple

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Add to Google
Computerworld Buyer's Guide - Vendors Matched to this Article
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Newsletter Subscription
Sign up for our Computerworld newsletters!
Syndicate content
 

Computerworld Webinar

Thursday, June 11th, 2009
10:30am EST (Sydney, Australia)
Screening at your PC

Computerworld is hosting a 30 minute live webinar to help you to learn how unified communications can save you money, foster innovation and business agility by making it easier for people to find, reach and collaborate with one another.

Register Now

Computerworld Community Comments
Whitepaper

Providing Business Continuity and Disaster Recovery for Microsoft Cluster Server and Windows Server 08 Failover Clustering Apps

Clustering provides high availability for mission critical applications. A well implemented cluster tolerates failure of individual components to deliver a much increased level of availability and resilience. Get implementation tips now.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links
 
Send Us E-mail | Privacy Policy
Features List | Media Kit | Advertising | Contact Us

Copyright 2009 IDG Communications. ABN 14 001 592 650. All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.