Secunia
Quote:
Secunia Advisory: SA23012
Release Date: 2006-11-21
Critical:
Highly critical
Impact: Privilege escalation
DoS
System access
Where: From remote
Solution Status: Unpatched
OS: Apple Macintosh OS X
|
Quote:
The vulnerability is caused due to an error in com.apple.AppleDiskImageController when handling corrupted DMG image structures. This can be exploited to cause a memory corruption and may allow execution of arbitrary code in kernel-mode.
The vulnerability is reported in a fully patched Mac OS X (2006-11-20). Other versions may also be affected.
Solution:
Deactivate the option "opening safe files after downloading" in the preferences and grant only trusted users access to affected systems.
|
Just in case anyone might be at risk from this.