Apple unveils OS X security patches

Denial of service and file overwrite bugs fixed

Written by Tom Sanders in California

Apple has released two security fixes for bugs in its OS X operating system.

The first patch plugs a hole that could allow hackers to crash a system by sending a specially crafted data packet. The flaw was first reported by the Northwestern University and effectively opens up the system for a denial of service attack.

A security notice on Apple's website claims that the flaw affects only the 10.4 versions of OS X and will not harm computers that sit behind a firewall or are otherwise protected through packet filtering. 

The other patch targets a bug in the 10.4 Tiger operating system that allows users inadvertently to overwrite standard widgets in Apple's Dashboard application.

Dashboard is an environment where small Java-based applications called widgets can run. The system comes with several pre-installed widgets including a calculator and weather forecaster, and users can download additional ones from the internet.

The update provides a warning when a user attempts to install a widget that has the same name as an existing one. Previously the new widget would run instead of the system widget, effectively making the original one inaccessible to the user.

This latest update moves OS X 10.4 to version 10.4.2 and is the third security update for the operating system since its release in April

Users can download the 44MB patch through the software update option in OS X or directly from Apple's website here

Tags:

reader comments

related articles

Fifth security patch so far this year

Apple issues 'highly critical' patch

Security Update 2005-005 fixes 20 flaws 05 May 2005

 

Apple issues major Tiger update

37MB patch fixes at least 35 bugs 18 May 2005

Apple patches Java problems

Stops browser going on Safari 25 Apr 2005

Apple slapped for sloppy security response

Buffer overflow flaw left open for three months 21 Apr 2005

Security hole bites Apple's Tiger

Latest Widgets handy for hackers 11 May 2005

Apple patches 11 security holes

Several buffer overflow vulnerabilities fixed 10 Jun 2005

Apple slips security fixes into rollout

Updates for iTunes and QuickTime 10 Sep 2008

Apple patches QuickTime and iPhoto flaws

Fixes for multimedia tool and image organiser 07 Feb 2008

Apple QuickTime exploit goes wild

Streaming media flaw used to push malware 04 Dec 2007

related whitepapers

today's top stories

WiMax: Threat or opportunity?

We examine the merits of WiMax and its benefits relative to other wireless technologies in our latest video 13 Oct 2008

Learning from the credit crunch to avoid a broadband crunch

While it might be the most pressing issue de jour , the financial system isn’t the only area where government needs to... 10 Oct 2008

How careerism can warp IT procurement

Many working in IT put their career interests before those of their employer when weighing up purchasing options 10 Oct 2008

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job


IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Are you worried about your job prospects in IT over the next 12 months?

Are you worried about your job prospects in IT over the next 12 months?

Will the economic crisis affect your job prospects?

Previous poll results

Latest audio and video articles

Remote workerVideo

WiMax: Threat or opportunity?

We examine the merits of WiMax and its benefits relative to other wireless technologies in our latest video 13 Oct 2008

programming codeVideo

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Latest in-depth articles

Financial Services Authority buildingAnalysis

FSA threatens executives with fines

Senior management to be held accountable for security lapses at banks 09 Oct 2008

Comment

Broadband must be a spending priority

For the economic health of the nation, the government would do better to bankroll an optical fibre rollout rather than prop up profligate banks 09 Oct 2008

Advertisement

Primary Navigation