----------------------------------------------------------------------

Secunia is proud to announce the availability of the Secunia Software
Inspector.

The Secunia Software Inspector is a free service that detects insecure
versions of software that you may have installed in your system. When
insecure versions are detected, the Secunia Software Inspector also
provides thorough guidelines for updating the software to the latest
secure version from the vendor.

Try it out online:
http://secunia.com/software_inspector/

----------------------------------------------------------------------

TITLE:
Mac OS X Security Update Fixes Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA24198

VERIFY ADVISORY:
http://secunia.com/advisories/24198/

CRITICAL:
Highly critical

IMPACT:
Privilege escalation, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Apple Macintosh OS X
http://secunia.com/product/96/

DESCRIPTION:
Apple has issued a security update for Mac OS X, which fixes multiple
vulnerabilities.

1) A boundary error exists in Finder, which can be exploited by
malicious people to cause a buffer overflow by tricking a user to
mount a malicious disk image.

Successful exploitation may allow execution of arbitrary code.

2) A null-pointer dereference error in iChat Bonjour can be exploited
by malicious people to cause the application to crash.

For more information:
SA23945

NOTE: A similar issue exists in Mac OS X 10.3.

3) A format string error in the handling of AIM URLs in iChat can be
exploited by malicious people to possibly execute arbitrary code. 

Successful exploitation requires that a user is tricked into
accessing a specially crafted AIM URL.

4) An error in the UserNotificationCenter can be exploited by
malicious, local users to gain escalated privileges.

For more information:
SA23846

SOLUTION:
Apply Security Update 2007-002:

Security Update 2007-002 (10.4.8 Universal):
http://www.apple.com/support/downloads/securityupdate2007002universal.html

Security Update 2007-002 (10.4.8 PPC):
http://www.apple.com/support/downloads/securityupdate2007002ppc.html

Security Update 2007-002 (10.3.9 Panther):
http://www.apple.com/support/downloads/securityupdate2007002panther.html

PROVIDED AND/OR DISCOVERED BY:
1) Kevin Finisterre, DigitalMunition
3) LMH

ORIGINAL ADVISORY:
Apple:
http://docs.info.apple.com/article.html?artnum=305102

OTHER REFERENCES:
MOAB:
1) http://projects.info-pull.com/moab/MOAB-09-01-2007.html
3) http://projects.info-pull.com/moab/MOAB-20-01-2007.html

SA23846:
http://secunia.com/advisories/23846/

SA23945:
http://secunia.com/advisories/23945/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------