Apple Mac OS X Security Update 2005-008 Multiple Vulnerabilities

Bugtraq ID:	14914
Class:	Unknown
CVE:	CVE-2005-1992 CVE-2005-2747 CVE-2005-2746 CVE-2005-2745 CVE-2005-2748 CVE-2005-2744 CVE-2005-2743 CVE-2005-2524 CVE-2005-2742 CVE-2005-2741
Remote:	Yes
Local:	Yes
Published:	Sep 22 2005 12:00AM
Updated:	Jul 12 2009 05:06PM
Credit:	Announced by the vendor.
Vulnerable:	Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3
Not Vulnerable:

Apple Mac OS X Security Update 2005-008 Multiple Vulnerabilities

Apple has released Security Update 2005-008 to address multiple Mac OS X local and remote vulnerabilities.

The following vulnerabilities were addressed by the security update:

An arbitrary code execution vulnerability in ImageIO.

Two vulnerabilities in Mail resulting in information disclosure.

A local privilege escalation vulnerability in malloc. This issue has been split into BID 14939.

An arbitrary code execution vulnerability in QuickDraw Manager.

A privilege escalation vulnerability in QuickTime for Java.

An arbitrary code execution vulnerability in Ruby.

A cross-site scripting vulnerability in Safari.

An unauthorized access vulnerability in SecurityAgent.

A privilege escalation vulnerability in securityd.

Apple Mac OS X Security Update 2005-008 Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Apple Mac OS X Security Update 2005-008 Multiple Vulnerabilities

Solution:
Apple has released advisory APPLE-SA-2005-09-22 and fixes to address these issues:


Apple Mac OS X 10.3.9

• Apple SecUpd2005-008Pan.dmg
  http://www.apple.com/support/downloads/SecUpd2005-008Pan.dmg

Apple Mac OS X Server 10.3.9

• Apple SecUpd2005-008Pan.dmg
  http://www.apple.com/support/downloads/SecUpd2005-008Pan.dmg

Apple Mac OS X 10.4.2

• Apple SecUpd2005-008Ti.dmg
  http://www.apple.com/support/downloads/SecUpd2005-008Ti.dmg

Apple Mac OS X Server 10.4.2

• Apple SecUpd2005-008Ti.dmg
  http://www.apple.com/support/downloads/SecUpd2005-008Ti.dmg

Apple Mac OS X Security Update 2005-008 Multiple Vulnerabilities

References:

• Apple Security Updates (Apple)
  
• Mac OS X Homepage (Apple)
  
• Security Updates (Apple)
  
• Vendor Home Page (Apple)