10.3.7 Security update and Colorsync?
10.3.7 Security update and Colorsync?
- Subject: 10.3.7 Security update and Colorsync?
- From: Dan Reid <email@hidden>
- Date: Wed, 26 Jan 2005 09:19:29 -0700
Title: 10.3.7 Security update and Colorsync?
Go ponder this one folks. I pulled this info as it’s kind of funny, Colorsync and security issues?
>Apple has released Security Update 2005-001 for both Mac OS X 10.3.7 and Mac OS X 10.2.8
>Component: ColorSync
>Available for: Mac OS X v10.3.7, Mac OS X Server v10.3.7, Mac OS X v10.2.8, Mac OS X Server v10.2.8
>Impact: Malformed ICC color profiles could overwrite the program heap, resulting in arbitrary code execution.
>Description: An out-of-specification or improperly embedded ICC color profile could overwrite the program heap and allow arbitrary code execution. There are no known exploits for this issue. With this update, ColorSync will reject incorrectly-formed ICC color profiles.
Hopefully this update won’t result in breaking other things with Colorsync. Best of luck!
--
Dan B. Reid
RENAISSANCE PHOTOGRAPHIC IMAGING
Color Management Products & Training for Print, Internet, & Motion Graphics
http://www.rpimaging.com | Toll Free: (866) RGB-CMYK
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Colorsync-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden