Created: 18 September 2007 | Watched by: 4 people | Comments: 0 comments

• Add to my
  bookmarks

  Add comment

  1 group
  1 person
  

  Mac Mail flaw resurfaces in Leopard - vnunet.com 

  http://www.vnunet.com/vnunet/news/2203925/mac-mail-flaw-resurfaces

  Researchers have reported a vulnerability in Apple 's Leopard operating system that the company had already patched. Heise Security said in a news posting that it had found the flaw in Apple's Mail application. ... The vulnerability lies in the way Mail handles image attachments. An attacker could take executable code and rename it as a .jpg file. Mail would then run the code without the user even being aware that an application had been started. This could allow an attacker to distribute malicious code to users disguised as an image attachment. Heise Security said that, while the unpatched vulnerability is unique to Apple's latest operating system, it is hardly new. Apple patched the same flaw for Leopard's predecessor, MacOS 10.4 Tiger, in early 2006. When a user attempts to open the attachment in Tiger, a warning is displayed that the file is an executable and not an image. "Apple apparently either did not incorporate this update into Leopard, or did not do it correctly," said Heise Sec   [More...] [Less...]

  First added: 21 November 2007, by: Jutta Schrimpf  [Report as spam]

  Average rating (1 rating):

  1 2 3 4 5

  Tags:  apple, leopard, mac, mail flaw