September 2010 - Security-announce

APPLE-SA-2010-09-20-1 Security Update 2010-006
by Apple Product Security 20 Sep '10

20 Sep '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-09-20-1 Security Update 2010-006 Security Update 2010-006 is now available and addresses the following: AFP CVE-ID: CVE-2010-1820 Available for: Mac OS X v10.6.4, Mac OS X Server v10.6.4 Impact: A remote attacker may access AFP shared folders without a valid password Description: An error handling issue exists in AFP Server. A remote attacker with knowledge of an account name on a target system may bypass the password validation and access AFP shared folders. By default, File Sharing is not enabled. This issue does not affect systems prior to Mac OS X v10.6. Security Update 2010-006 may be obtained from the Software Update pane in System Preferences, or Apple's Software Downloads web site: http://www.apple.com/support/downloads/ For Mac OS X v10.6.4 and Mac OS X Server v10.6.4 The download file is named: SecUpd2010-006Snow.dmg Its SHA-1 digest is: 84e2c0b95e932be42360273f99581ecf2c25fe34 Security Update 2010-006 is not presented to Mac OS X v10.5 systems. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMl5etAAoJEGnF2JsdZQeex3AIAKqmmbzoPH5qQ61DWtsNCfs3 4tatrUl3kuM2K42fhYXBi/U4iO/gK3VyPlCeSKkcDhDqF+zZAyQmlnJkNHU48tgJ H9aUOIZ6NHdHYhCtvXBjHq8Luw7DZW7buG8hyTgOdRic/ycaRvIkb98t1Dg9kta6 1wK0dX5zsswyB5s7Fuf4CgCPdD/XDScz/M3SgymTRX/1DqGVv7LFDE8t5zF0SZct Tf8vzhgkKAWKCiBo+UohP5N5kiCMdLfI89BSU//0ORpYBRIhFti+6sebkKigH1/m xsxW9BJk23MvJEj26Q3hRPWSzHnr1Sh6NinAqe2xW0QvfR3EyupRuw6mv+52rJU= =QRae -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-09-15-1 QuickTime 7.6.8
by Apple Product Security 15 Sep '10

15 Sep '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-09-15-1 QuickTime 7.6.8 QuickTime 7.6.8 is now available and addresses the following: QuickTime CVE-ID: CVE-2010-1818 Available for: Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: An input validation issue exists in the QuickTime ActiveX control. An optional parameter '_Marshaled_pUnk' may be passed to the ActiveX control to specify an arbitrary integer that is later treated as a pointer. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed by ignoring the '_Marshaled_pUnk' parameter. This issue does not affect Mac OS X systems. Credit to HBelite working with TippingPoint's Zero Day Initiative for reporting this issue. QuickTime CVE-ID: CVE-2010-1819 Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing an image in a maliciously prepared directory may lead to arbitrary code execution Description: A path searching issue exists in QuickTime Picture Viewer. If an attacker places a maliciously crafted DLL in the same directory as an image file, opening the image file with QuickTime Picture Viewer may lead to arbitrary code execution. This issue is addressed by removing the current working directory from the DLL search path. This issue does not affect Mac OS X systems. Credit to Haifei Li of Fortinet's FortiGuard Labs for reporting this issue. QuickTime 7.6.8 may be obtained from the Software Update application, or from the QuickTime Downloads site: http://www.apple.com/quicktime/download/ For Windows 7 / Vista / XP SP2 or later The download file is named: "QuickTimeInstaller.exe" Its SHA-1 digest is: 38e33492ea1200abeda87256872e5a3dd47e584f QuickTime 7.6.8 is not presented to Mac OS X systems. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMkQCVAAoJEGnF2JsdZQee518IALLozEKvWbSpuS/w7cg/vyTL jy773Ceo6KU4Y3lYfYI4Lqigm/pc405ALtMAgH7sUoxARcXGqpQHuABcoLdFVZmh i2Ax/5oLKdwrgvH1jyn5vhfTC+Zh9jONqxtmYumKX2acodfT32YQmBLgD5rfBwH1 1mWXYZprcwF6C5XelcoG5NjbclKeSw/iqCtHNQ2UtV7H8vOvY0AnjfiKW3snarcL BTYyvI672fPPZGGp+f7wBFZCs31PRUQy2Q287WrV4+SljUevL0OCnzvK0ZgmWABB cWTthHx02uz8MmLKFs/5YUSJQdtZ756rpJEEi9f5oCAsokBil/OuvqI2ZXsIbVY= =5Ehp -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-09-08-1 iOS 4.1 for iPhone and iPod touch
by Apple Product Security 08 Sep '10

08 Sep '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-09-08-1 iOS 4.1 for iPhone and iPod touch iOS 4.1 for iPhone and iPod touch is now available and addresses the following: Accessibility CVE-ID: CVE-2010-1809 Available for: iOS 3.0 through 4.0.2 for iPhone 3GS and later, iOS 3.0 through 4.0.2 for iPod touch (3rd generation) Impact: An application's use of location services may not be announced through VoiceOver Description: A user interface accessibility issue exists in the settings panel for Location Services. VoiceOver does not announce the presence of the location services icon that is shown next to an application that has requested the user's location within the last 24 hours. This issue is addressed by ensuring that VoiceOver announces the presence of the icon. Credit to Robin Kipp of Forever Living Products Europe for reporting this issue. FaceTime CVE-ID: CVE-2010-1810 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: An attacker in a privileged network position may be able to redirect FaceTime calls Description: An issue in the handling of invalid certificates may allow an attacker in a privileged network position to redirect FaceTime calls. This issue is addressed through improved handling of certificates. Credit to Aaron Sigel of vtty.com for reporting this issue. ImageIO CVE-ID: CVE-2010-1811 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Processing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in the handling of TIFF images. Processing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of TIFF images. Credit: Apple. ImageIO CVE-ID: CVE-2010-1817 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Processing a maliciously crafted GIF image may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow exists in the handling of GIF images. Processing a maliciously crafted GIF image may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to Tom Ferris of Adobe PSIRT for reporting this issue. WebKit CVE-ID: CVE-2010-1786 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of "foreignObject" elements in SVG documents. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through additional validation of SVG documents. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue. WebKit CVE-ID: CVE-2010-1770 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A type checking issue exists in WebKit's handling of text nodes. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved type checking. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue. WebKit CVE-ID: CVE-2010-1785 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: An uninitialized memory access issue exists in WebKit's handling of the ":first-letter" and ":first-line" pseudo-elements in SVG text elements. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed by not rendering ":first-letter" or ":first- line" pseudo-elements in SVG text elements. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue. WebKit CVE-ID: CVE-2010-1780 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of element focus. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of element focus. Credit to Tony Chang of Google, Inc. for reporting this issue. WebKit CVE-ID: CVE-2010-1793 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of "font-face" and "use" elements in SVG documents. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of "font-face" and "use" elements in SVG documents. Credit to Aki Helin of OUSPG for reporting this issue. WebKit CVE-ID: CVE-2010-1421 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may change the contents of the clipboard Description: A design issue exists in the implementation of the JavaScript execCommand function. A maliciously crafted web page can modify the contents of the clipboard without user interaction. This issue is addressed by only allowing clipboard commands to be executed if initiated by the user. Credit: Apple. WebKit CVE-ID: CVE-2010-1422 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Interacting with a maliciously crafted website may result in unexpected actions on other sites Description: An implementation issue exists in WebKit's handling of keyboard focus. If the keyboard focus changes during the processing of key presses, WebKit may deliver an event to the newly-focused frame, instead of the frame that had focus when the key press occurred. A maliciously crafted website may be able to manipulate a user into taking an unexpected action, such as initiating a purchase. This issue is addressed by preventing the delivery of key press events if the keyboard focus changes during processing. Credit to Michal Zalewski of Google, Inc. for reporting this issue. WebKit CVE-ID: CVE-2010-1771 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of fonts. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of fonts. Credit: Apple. WebKit CVE-ID: CVE-2010-1783 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of dynamic modifications to text nodes. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. WebKit CVE-ID: CVE-2010-1764 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a website that redirects form submissions may lead to an information disclosure Description: A design issue exists in WebKit's handling of HTTP redirects. When a form submission is redirected to a website that also does a redirection, the information contained in the submitted form may be sent to the third site. This issue is addressed through improved handling of HTTP redirects. Credit to Marc Worrell of WhatWebWhat for reporting this issue. WebKit CVE-ID: CVE-2010-1782 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's rendering of inline elements. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to wushi of team509 for reporting this issue. WebKit CVE-ID: CVE-2010-1781 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A double free issue exists in WebKit's rendering of inline elements. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. Credit to James Robinson of Google, Inc. for reporting this issue. WebKit CVE-ID: CVE-2010-1784 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of CSS counters. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue. WebKit CVE-ID: CVE-2010-1787 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of floating elements in SVG documents. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. WebKit CVE-ID: CVE-2010-1791 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A signedness issue exists in WebKit's handling of JavaScript arrays. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of JavaScript array indices. Credit to Natalie Silvanovich for reporting this issue. WebKit CVE-ID: CVE-2010-1788 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of "use" elements in SVG documents. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of "use" elements in SVG documents. Credit to Justin Schuh of Google, Inc. for reporting this issue. WebKit CVE-ID: CVE-2010-1812 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of selections. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of selections. Credit to Ojan Vafai of Google, Inc. for reporting this issue. WebKit CVE-ID: CVE-2010-1813 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's rendering of HTML object outlines. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. Credit to Jose A. Vazquez of spa-s3c.blogspot.com for reporting this issue. WebKit CVE-ID: CVE-2010-1814 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of form menus. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is fixed through improved handling of form menus. Credit to Csaba Osztrogonac of University of Szeged for reporting this issue. WebKit CVE-ID: CVE-2010-1815 Available for: iOS 2.0 through 4.0.2 for iPhone 3G and later, iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of scrollbars. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved memory management. Credit to Tony Chang of Google, Inc for reporting this issue. Installation note: These updates are only available through iTunes, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from www.apple.com/itunes/ iTunes will automatically check Apple's update server on its weekly schedule. When an update is detected, it will download it. When the iPhone or iPod touch is docked, iTunes will present the user with the option to install the update. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iPhone or iPod touch. The automatic update process may take up to a week depending on the day that iTunes checks for updates. You may manually obtain the update via the Check for Updates button within iTunes. After doing this, the update can be applied when your iPhone or iPod touch is docked to your computer. To check that the iPhone or iPod touch has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "4.1 (8B117)" or later. Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMh7o3AAoJEGnF2JsdZQeeYhIIAJxeCGgyBn4AQMbEwT3UtcF+ pWRQ+uids24pfBo3jIO9PcZeiNympy9ysau2TuNZ5QmFwwetMC0W5yjIefNiTptf zNSitc139vkPD38TV6yk14RPYT4V1J7Eykqwt54szmCe9a3Qtn7nWVzVitfVgNEB D/fltqKUnhcSdYt5WcMy/AIhqdAK24SuILj+uSyDxhUWjpsX0EEsSzlb6TUwZND3 vXazJIFWYeKh4qdprTnenO8bFAM50Lr/80gWZGDdloXj8aTG9BcTblxqW6jr1EcT bsJ+4nh1YW1RDI/PXZTjoIDTdn4cD5vbgt6vOABLX85wa3cYvpfVeUXCEsG7aHY= =2o0l -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-09-07-1 Safari 5.0.2 and Safari 4.1.2
by Apple Product Security 07 Sep '10

07 Sep '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-09-07-1 Safari 5.0.2 and Safari 4.1.2 Safari 5.0.2 and Safari 4.1.2 is now available and addresses the following: Safari CVE-ID: CVE-2010-1805 Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a file in a directory that is writable by other users may lead to arbitrary code execution Description: A search path issue exists in Safari. When displaying the location of a downloaded file, Safari launches Windows Explorer without specifying a full path to the executable. Launching Safari by opening a file in a specific directory will include that directory in the search path. Attempting to reveal the location of a downloaded file may execute an application contained in that directory, which may lead to arbitrary code execution. This issue is addressed by using an explicit search path when launching Windows Explorer. This issue does not affect Mac OS X systems. Credit to Simon Raner of ACROS Security for reporting this issue. WebKit CVE-ID: CVE-2010-1807 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2 or later, Mac OS X Server v10.6.2 or later, Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: An input validation issue exists in WebKit's handling of floating point data types. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved validation of floating point values. Credit to Luke Wagner of Mozilla for reporting this issue. WebKit CVE-ID: CVE-2010-1806 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.2 or later, Mac OS X Server v10.6.2 or later, Windows 7, Vista, XP SP2 or later Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A use after free issue exists in WebKit's handling of elements with run-in styling. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of object pointers. Credit to wushi of team509, working with TippingPoint's Zero Day Initiative for reporting this issue. Safari 5.0.2 and Safari 4.1.2 address the same set of security issues. Safari 5.0.2 is provided for Mac OS X v10.5, Mac OS X v10.6, and Windows systems. Safari 4.1.2 is provided for Mac OS X v10.4 systems. Safari 5.0.2 is available via the Apple Software Update application, or Apple's Safari download site at: http://www.apple.com/safari/download/ Safari 4.1.2 is available via the Apple Software Update application, or Apple's Software Downloads web site: http://www.apple.com/support/downloads/ Safari for Mac OS X v10.6.2 and later The download file is named: Safari5.0.2SnowLeopard.dmg Its SHA-1 digest is: 695730a04038240c340571abf62c08f1ad5a8a5c Safari for Mac OS X v10.5.8 The download file is named: Safari5.0.2Leopard.dmg Its SHA-1 digest is: 3b71a553b53b8c22e0f4f21842f500ef5d6ed0e7 Safari for Mac OS X v10.4.11 The download file is named: Safari4.1.2Tiger.dmg Its SHA-1 digest is: 35aafd64b4a74115469bc83dc390857b896197a3 Safari for Windows 7, Vista or XP The download file is named: SafariSetup.exe Its SHA-1 digest is: 2ee92f29599b4bc554f9820171ad03398a15577b Safari for Windows 7, Vista or XP from the Microsoft Choice Screen The download file is named: Safari_Setup.exe Its SHA-1 digest is: a3418d1a4199bcc308c059b7c2caf14a20277ebb Safari+QuickTime for Windows 7, Vista or XP The file is named: SafariQuickTimeSetup.exe Its SHA-1 digest is: 0036cb2c832bed516c3df14f01772a3906c25270 Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMkqDfAAoJEGnF2JsdZQeekLgH/0NWHxYvcnohuV5dPz3UcHAf PTm8BkNyvsvfVFDzAI7UTItJ/+iQUgMCBQ8OCTfKW7J+uNLNS6mpiYL8AHVULUrV elTiYkrtawyWvpmdgJa5frgqPVNyw3xytLRgJFMZyUAJ5DHGFt4HlT5UtmNygKTP D3o5jlyg7ZBUBw/GmVzGVgWyw3ggHRWYt7PIkHCgbT/7CY8lgW1zzfB1N/5QB07g 9haA120bkzWIjgu+TXwQvy8tLGnOH8cx0FOYEg2QfXNvhJ4yxbKeyFPRUiDfQm2l w5ADU337P6fMPYdx0q9TlXLlmraGsG34EmjFnueS+MxrVm1Pi9Bb8AcIklb1G4s= =h9PJ -----END PGP SIGNATURE----- This email sent to site_archiver(a)lists.apple.com

1 0

APPLE-SA-2010-09-01-1 iTunes 10
by Apple Product Security 02 Sep '10

02 Sep '10

site_archiver(a)lists.apple.com Delivered-To: security-announce(a)lists.apple.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2010-09-01-1 iTunes 10 iTunes 10 is now available and addresses the following: WebKit CVE-ID: CVE-2010-1780, CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785, CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1789, CVE-2010-1790, CVE-2010-1791, CVE-2010-1792, CVE-2010-1793 Available for: Windows 7, Vista, XP SP2 or later Impact: Multiple vulnerabilities in WebKit Description: WebKit for Windows is updated to include the security fixes provided in Safari 5.0.1. Further information is available at http://support.apple.com/kb/HT4276 iTunes 10 may be obtained from: http://www.apple.com/itunes/download/ For Mac OS X: The download file is named: "iTunes10.dmg" Its SHA-1 digest is: 936a24a8897d024bddaeab1ef771d8b6e678f1f9 For Windows XP / Vista / Windows 7: The download file is named: "iTunesSetup.exe" Its SHA-1 digest is: 9bae2670a66e04beb87de7d7a645c9abff2f5b0b For 64-bit Windows XP / Vista / Windows 7: The download file is named: "iTunes64Setup.exe" Its SHA-1 digest is: 8103e9a3da41789f57adcce7ef973e9812c02e6f Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (Darwin) iQEcBAEBAgAGBQJMfsMfAAoJEGnF2JsdZQeekW8H/2VIr2jNZI3m2QbS0htUcdtN ARa0/PkkvU51pAneStdraRQheN+mU8nDCf0uSUpP5A9K2X5gFx6Do/OYZeyIxOxs ff6z/7qHQWLio6dPrp+jhbGevHivpAIGb/PqIUNHC94FKNaHUDXx+J8WB2Ht8475 gqNiGxHXlLE/7N/eqafLPonPJSYus9EtabHS5Yk0QlAeCd1RZ3GckiiEHscTI4Sl C8V85L5EwSv3owbhVyIPo8CmRz/PP52G3LAnLdLcmID4/UoLJPRU3YiQDhS/6qXy LQ5toTCtZ1V533kUKmHpBUu+HMFmXhh7GMHP7X1dsNKCA1boImf3k9+eKN8CCVE= =o8k+ -----END PGP SIGNATURE----- _______________________________________________ Do not post admin requests to the list. They will be ignored. Security-announce mailing list (Security-announce(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/security-announce/site_archiver%40li… This email sent to site_archiver(a)lists.apple.com

1 0