Re: OS X security holes so numerous Apple can't keep up...
- From: Alan Baker <alangbaker@xxxxxxxxx>
- Date: Fri, 21 Apr 2006 03:01:52 GMT
In article <xuX1g.29833$BL7.23262@xxxxxxxxxxxxxxxxxxxxxx>,
Stew <antwun@xxxxxxxxx> wrote:
http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233
Scary! Did chimps code OS X?
Let's take them one by one:
"Apple OS X 10.4.5 .tiff "LZWDecodeVector ()" Heap Overflow"
His own links says:
"Solution:
This issue was silently fixed by Apple in update 10.4.6.
http://docs.info.apple.com/article.html?artnum=303411";
<URL:http://www.security-protocols.com/sp-x24-advisory.php>
IOW, fixed; a non-issue.
"Apple OS X BOM ArchiveHelper .zip Heap Overflow"
And his own site says:
"Technical Details:
When decompressing specially crafted .zip file, the BOMStackPop ()
function incorrectly parses the malformed data and causes the
application to segmentation fault. "
<URL:http://www.security-protocols.com/sp-x25-advisory.php>
IOW, it causes a crash and the application cannot then run arbitrary
code.
"Apple OS X Safari 2.0.3 Multiple Vulnerabilities"
Again, he only shows that Safari will crash, not that it will allow
execution of arbitrary code.
"Apple OS X 10.4.6 "ReadBMP ()" .bmp Heap Overflow"
He shows it crashes. Nothing more.
"Apple OS X 10.4.6 "CFAllocatorAllocate ()" .gif Heap Overflow"
Ditto.
"Apple OS X 10.4.6 .tiff "_cg_TIFFSetField ()" DoS"
More of same.
"Apple OS X 10.4.6 .tiff "PredictorVSetField ()" Heap Overflow"
Le meme chose.
So all he's really shown is that heap overflows cause the OS to shut
down the offending application.
Wow. The OS is doing exactly what it is supposed to do.
--
Alan Baker
Vancouver, British Columbia
"If you raise the ceiling 4 feet, move the fireplace from that wall
to that wall, you'll still only get the full stereophonic effect
if you sit in the bottom of that cupboard."
.
- Follow-Ups:
- Re: OS X security holes so numerous Apple can't keep up...
- From: John Slade
- Re: OS X security holes so numerous Apple can't keep up...
- References:
- Prev by Date: Re: Shame on you, Microsoft. Shame on you!
- Next by Date: Re: joey jojo, jim lee, Crawley, Graves and bates.....
- Previous by thread: Re: OS X security holes so numerous Apple can't keep up...
- Next by thread: Re: OS X security holes so numerous Apple can't keep up...
- Index(es):
Relevant Pages
|
