Apple Releases Mac OS X Security Update 2010-005 - Fixes OS X PDF Exploit
Apple has released a Security Update today for Mac OS X Server 10.5, Mac OS X 10.5.8, Mac OS X Server 10.6, Mac OS X 10.6.4 which addresses issues in the following software:
CFNetwork, ClamAV, CoreGraphics, libsecurity, PHP, Samba
Full changes are detailed on Apple's support site.
Most notably, the patch addresses a Core Graphics PDF exploit which apparently is the same security hole that was used in the JailbreakMe website for iOS.Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution
Description: A heap buffer overflow exists in CoreGraphics' handling of PDF files. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved bounds checking. Credit to Rodrigo Rubira Branco from the Check Point Vulnerability Discovery Team (VDT) for reporting this issue.The update is recommended for all Mac OS X customers.
Popular Stories
It is now late July, and that means the iPhone 18 Pro and iPhone 18 Pro Max are less than two months away. The devices are expected to look similar to the iPhone 17 Pro and iPhone 17 Pro Max, but there will still be many year-over-year changes, with rumored features including a smaller Dynamic Island, 5G via satellite, and more.
Apple is expected to unveil the iPhone 18 Pro, iPhone 18 Pro...
Apple's first high-end MacBook redesign in five years is expected to arrive in the near future, bringing a run of firsts to the Mac.
Bloomberg's Mark Gurman expects the laptop to arrive between late 2026 and early 2027, with the later window now looking more likely owing to the global memory chip shortage. Analyst Ming-Chi Kuo expects mass production to begin by late 2026.
Apple last...
In his newsletter today, Bloomberg's Mark Gurman reiterated that a new "Apple Upgrade" program is set to launch in the U.S. on Tuesday, July 28. Apple will stop accepting iPhone Upgrade Program sign-ups on the same day, but he said customers who are already enrolled will be able to remain in the program "for the time being."
Apple is partnering with buy-now, pay-later company Klarna on the...
