Wednesday, October 04, 2006

Mac Security Updates

New updates have been released for Mac OS X users, 1 relating to the mac version of Skype and the other a generic OS X update.

The Register:

'The security bug stems from a format string error in the Skype URI handler. The flaw creates a potential means for hackers to create a maliciously constructed Skype URL which, if followed, might allow them to inject hostile code onto vulnerable systems.


The security bug affects Skype versions prior to 1.5.0.80. Users are advised to upgrade to this version of the software, as explained in an advisory by the firm here. The bug was discovered by security researcher Tom Ferris.

In related news, Apple released a security update designed to address multiple vulnerabilities in Mac OS X (some of which have become the target of hacker exploitation) last weekend. Security notification firm Secunia has published a useful overview of these various vulnerabilities here. ®'

No comments: