Multiple Security Vulerabilities Found In Apple's Disk Image Software - MacRumors
Skip to Content

Multiple Security Vulerabilities Found In Apple's Disk Image Software

The "Month of Kernel Bugs" project has found two unpatched security vulnerabilities in the way Mac OS X handles .dmg files.

The first vulnerability, rated "highly critical" by security-firm Secunia, can lead to privilege escalation, denial of service, and system access by a remote user (if Safari's open "safe" files option is checked).

The second issue is similar in nature, in that a corrupted UDTO HFS+ .dmg (ex. bad sectors) can lead to a denial of service condition.

A workaround for both issues is to disable Safari's option to open "safe" files after downloading, and to not open any .dmg file from a source you do not trust.

The latest findings increase the total to four security bugs found in Apple's software since the beginning of the project this month (See also: Airport Driver Exploit , fpathconf() Exploit ). The project has also targeted Windows, Linux, and other popular BSD distributions, with a stated goal to "check how many unreported and unknown issues can be found in kernel code out there, using simple, yet effective tools deploying techniques such as fuzzing and 'stress testing'."

Popular Stories

iphone 17 pro dark blue 1

Apple Preparing 'Most Significant Overhaul in the iPhone's History'

Sunday March 29, 2026 8:18 am PDT by
Bloomberg's Mark Gurman has high expectations for Apple's first foldable iPhone. In his Power On newsletter today, he said the foldable iPhone will be "the most significant overhaul in the iPhone's history." "iPhone 4, iPhone 6 and iPhone X were clearly a big deal, but this is a whole new design," he said. Like Samsung's Galaxy Z Fold 7, the foldable iPhone will reportedly open up like ...
Apple Event Logo

Apple to Launch These 15+ New Products Later This Year

Friday March 27, 2026 2:03 pm PDT by
March has been an incredibly busy month for Apple, with the company unveiling more than 10 new products and accessories. We said hello to the MacBook Neo at the start of the month, and we bid farewell to the Mac Pro at the end of it. Nevertheless, there is still a lot more to come this year. Beyond the usual annual updates to iPhones and Apple Watches, Apple's all-new smart home hub is...
Apple Apps Grid

Apple Releasing Two New iPhone Apps This Year

Saturday March 28, 2026 8:00 am PDT by
Apple is expected to release two new iPhone apps this year, including an Apple Business app and a Siri app with chatbot-like functionality. With the Apple Business app, employees at businesses using the new Apple Business platform will be able to install apps for work, view contact information for colleagues, and request support. Apple Business is launching on April 14, and it replaces Apple ...