August 2010 - Security-announce

APPLE-SA-2010-08-24-1 Security Update 2010-005
by Apple Product Security 24 Aug '10

24 Aug '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-08-24-1 Security Update 2010-005 Security Update 2010-005 is now available and addresses the following: ATS CVE-ID: CVE-2010-1808 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: Viewing or downloading a document containing a maliciously crafted embedded font may lead to arbitrary code execution Description: A stack buffer overlow exists in Apple Type Services' handling of embedded fonts. Viewing or downloading a document containing a maliciously crafted embedded font may lead to arbitrary code execution. This issue is addressed through improved bounds checking. CFNetwork CVE-ID: CVE-2010-1800 Available for: Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: An attacker with a privileged network position may intercept user credentials or other sensitive information Description: CFNetwork permits anonymous TLS/SSL connections. This may allow a man-in-the-middle attacker to redirect connections and intercept user credentials or other sensitive information. This issue does not affect the Mail application. This issue is addressed by disabling anonymous TLS/SSL connections. This issue does not affect systems prior to Mac OS X v10.6.3. Credit to Tomas Bjurman of Sirius IT, Jean-Luc Giraud of Citrix, and Aaron Sigel of vtty.com for reporting this issue. ClamAV CVE-ID: CVE-2010-0098, CVE-2010-1311 Available for: Mac OS X Server v10.5.8, Mac OS X Server v10.6.4 Impact: Multiple vulnerabilities in ClamAV Description: Multiple vulnerabilities exist in ClamAV, the most serious of which may lead to arbitrary code execution. This update addresses the issues by updating ClamAV to version 0.96.1. ClamAV is distributed only with Mac OS X Server systems. Further information is available via the ClamAV website at http://www.clamav.net/ CoreGraphics CVE-ID: CVE-2010-1801 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution Description: A heap buffer overflow exists in CoreGraphics' handling of PDF files. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to Rodrigo Rubira Branco from the Check Point Vulnerability Discovery Team (VDT) for reporting this issue. libsecurity CVE-ID: CVE-2010-1802 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: An attacker in a privileged network position who can obtain a domain name that differs only in the last characters from the name of a legitimate domain may impersonate hosts in that domain Description: An issue exists in the handling of certificate host names. For host names containing three or more components, the last characters are not properly compared. In the case of a name containing exactly three components, only the last character is not checked. For example, if an attacker in a privileged network position could obtain a certificate for www.example.con the attacker can impersonate www.example.com. This issue is addressed through improved handling of certificate host names. Credit to Peter Speck for reporting this issue. PHP CVE-ID: CVE-2010-1205 Available for: Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: Loading a maliciously crafted PNG image may lead to an unexpected application termination or arbitary code execution Description: A buffer overflow exists in PHP's libpng library. Loading a maliciously crafted PNG image may lead to an unexpected application termination or arbitary code execution. This issue is addressed by updating libpng within PHP to version 1.4.3. This issue does not affect systems prior to Mac OS X v10.6. PHP CVE-ID: CVE-2010-1129, CVE-2010-0397, CVE-2010-2225, CVE-2010-2531, CVE-2010-2484 Available for: Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: Multiple vulnerabilities in PHP 5.3.1 Description: PHP is updated to version 5.3.2 to address multiple vulnerabilities, the most serious of which may lead to arbitary code execution. Further information is available via the PHP website at http://www.php.net/ Samba CVE-ID: CVE-2010-2063 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: An unauthenticated remote attacker may cause a denial of service or arbitrary code execution Description: A buffer overflow exists in Samba. An unauthenticated remote attacker may cause a denial of service or arbitrary code execution by sending a maliciously crafted packet. This issue is addressed by performing additional validation of packets in Samba. Security Update 2010-005 may be obtained from the Software Update pane in System Preferences, or Apple's Software Downloads web site: http://www.apple.com/support/downloads/ For Mac OS X v10.6.4 The download file is named: SecUpd2010-005Snow.dmg Its SHA-1 digest is: 0f849caddd3b61383dabf423848f9f8059f4656e For Mac OS X Server v10.6.4 The download file is named: SecUpdSrvr2010-005.dmg Its SHA-1 digest is: 0a089a7c367ae2f38149ad1f535cc5ff078d3f15 For Mac OS X v10.5.8 The download file is named: SecUpd2010-005.dmg Its SHA-1 digest is: 22912e8c3756c03ea7565c7689b05952bae0bb50 For Mac OS X Server v10.5.8 The download file is named: SecUpdSrvr2010-005.dmg Its SHA-1 digest is: f2accfece4593b7a2658f65b2076c3b83227ff8c Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMc/7GAAoJEGnF2JsdZQeeypMIAJhchg9dd+oAtJz8hpchV+y5 UxfXFMkbGA7UnSFwEY/18UqMnrU98eFhbsRI2wVTte4W0oXbSCvCTqaGIkbTXJv8 6VO3SHWR6qWaU2JGqgtycKAd/uktgJoMz/HGJJdfYwEzvXISQSDqMCGbh4EI9RSC raIOS7PHFRhia/MkdnHZ+AAQik9Ols+pS9l3UwN19p34/U/vSWe04uZKqAAF4g4w NWkq7y583lfWinyWKqtq+mmytAVrfKD//+gqK4C5CjFPRy2q4AsAhyHqC1WoWSEy L4ShL/3I1d0oam8AGnRsCB3rIJOFN+ba/BnDuw+Aeq3HzYNAHGhit8LihKjZV/A= =FU0L -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-08-12-1 QuickTime 7.6.7
by Apple Product Security 12 Aug '10

12 Aug '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-08-12-1 QuickTime 7.6.7 QuickTime 7.6.7 is now available and addresses the following: QuickTime CVE-ID: CVE-2010-1799 Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A stack buffer overflow exists in QuickTime's error logging. Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. This issue is addressed by disabling debug logging. This issue does not affect Mac OS X systems. QuickTime 7.6.7 may be obtained from the Software Update application, or from the QuickTime Downloads site: http://www.apple.com/quicktime/download/ For Windows 7 / Vista / XP SP2 or later The download file is named: "QuickTimeInstaller.exe" Its SHA-1 digest is: 38a132fe1969e617f33c00ebae3ce34a7695113f QuickTime 7.6.7 is not presented to Mac OS X systems. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMZFzJAAoJEGnF2JsdZQeeF60H/2/72LHKWPc4x6i8Zf5HDarY JuD7E+DGRnzPgm62zWOpdN4e6I7ldVjQdap3yW84GmVYClzhkHBZeUqwB/PHYRyQ FXXTr15GBfOZgYFRc3YSXQhax0BPtPuJeh4oWLcpnyGAs6FvfF1buzG8JGRCZ0wZ j5ZiVutpKApu/K/OCVdB+IbRJXOYk9uUOt+fT7kQLQK1Tv5g2UBaIuRkuBciBPXT lwHOvsfpVfh7lVqcaJpjObyb5HQoJpT0HvLSroIB1vVfRcD62x7LnYAlMJUju4P3 1QuwzhIeXahq1MpoAXQ6k6j15KZ0edpMcNxtOOCPvHZnAD8FgZHVjWtAVY5qG+k= =A2mc -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-08-11-2 iOS 3.2.2 Update for iPad
by Apple Product Security 11 Aug '10

11 Aug '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-08-11-2 iOS 3.2.2 Update for iPad iOS 3.2.2 Update for iPad is now available and addresses the following: FreeType CVE-ID: CVE-2010-1797 Available for: iOS 3.2 and 3.2.1 for iPad Impact: Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution Description: A stack buffer overflow exists in FreeType's handling of CFF opcodes. Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution. This issue is addressed through improved bounds checking. IOSurface CVE-ID: CVE-2010-2973 Available for: iOS 3.2 and 3.2.1 for iPad Impact: Malicious code running as the user may gain system privileges Description: An integer overflow exists in the handling of IOSurface properties, which may allow malicious code running as the user to gain system privileges. This issue is addressed through improved bounds checking. Installation note: These updates are only available through iTunes, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from www.apple.com/itunes/ iTunes will automatically check Apple's update server on its weekly schedule. When an update is detected, it will download it. When the iPad is docked, iTunes will present the user with the option to install the update. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iPad. The automatic update process may take up to a week depending on the day that iTunes checks for updates. You may manually obtain the update via the Check for Updates button within iTunes. After doing this, the update can be applied when your iPad touch is docked to your computer. To check that the iPad touch has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "4.0 (7B500)" or later. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMYJDyAAoJEGnF2JsdZQee19YH/0qMgDYy/XeDscz7gVomr4WD UViyxgPfXEiVXMwxZulDQJ+zu3RiH5e833O9XZPbA7+ivxeRE/0m3dntgWNoPn7t fv5UM0pHf4AZr5KMQ6T3a20BsnEin+UCdmPrc5bRCBOyJQCNOI9cK1J3ex0BPaup MKUIOgs/1jjZRk0hWWEwpdLqtaToQQ0D2H4BMiPRpxJdUtAu8NiOnAZd3yz6g21x n3oqFXdNT+iXIWQ0HP1iVwu9cm2RlmwHVa6lBE25mOJMsygkBtWfmf1Ho2tnITkm SvlL/pEq3OHesrvXwYD2bC06GfCnyiZnA0QZgwoijicr2991YkeIx+25baLz54Q= =lfo9 -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-08-11-1 iOS 4.0.2 Update for iPhone and iPod touch
by Apple Product Security 11 Aug '10

11 Aug '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-08-11-1 iOS 4.0.2 Update for iPhone and iPod touch iOS 4.0.2 Update for iPhone and iPod touch is now available and addresses the following: FreeType CVE-ID: CVE-2010-1797 Available for: iOS 2.0 through 4.0.1 for iPhone 3G and later, iOS 2.1 through 4.0 for iPod touch (2nd generation) and later Impact: Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution Description: A stack buffer overflow exists in FreeType's handling of CFF opcodes. Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution. This issue is addressed through improved bounds checking. IOSurface CVE-ID: CVE-2010-2973 Available for: iOS 2.0 through 4.0.1 for iPhone 3G and later, iOS 2.1 through 4.0 for iPod touch (2nd generation) and later Impact: Malicious code running as the user may gain system privileges Description: An integer overflow exists in the handling of IOSurface properties, which may allow malicious code running as the user to gain system privileges. This issue is addressed through improved bounds checking. Installation note: These updates are only available through iTunes, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from www.apple.com/itunes/ iTunes will automatically check Apple's update server on its weekly schedule. When an update is detected, it will download it. When the iPhone or iPod touch is docked, iTunes will present the user with the option to install the update. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iPhone or iPod touch. The automatic update process may take up to a week depending on the day that iTunes checks for updates. You may manually obtain the update via the Check for Updates button within iTunes. After doing this, the update can be applied when your iPhone or iPod touch is docked to your computer. To check that the iPhone or iPod touch has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "4.0 (8A400)" or later. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMYJD8AAoJEGnF2JsdZQee9ScIAMTgWTd5HyK46nD/AwW2w45z gk4nZulofQcC6JJvTCpgkn9RpMi9lEMywJPhn1MCnr3YUlu2L5ENptivhk5welhU eSR5a/sRLmpgKdIaaEBd4r0jYuOnUn5xx3EL6I86XOvHyDiFmwz8MnRifbKTg0/P lmCO7Z4z6ON0aw1ylOYDNMCp5N+mk5wgAnAUYICqwFfV3g/+BlthEt/4i30XruCS +s32bewuf8j8FGttnTb01TfhL+HFSyfxwfLkMYL31mJP5ABSSctciVTo70PFIW0N fX7dSO1LRI3IVlb/KTM2t7BHaS2pWd5CmU5zBQKvidQljQiIDGYfBbZg+ELj4Ik= =5MAo -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0