 |
|
|
|
|
 |
Site Archive (Complete) | |||
|
||||
|
ABOUT US |
CONTACT |
ADVERTISE |
SUBSCRIBE |
SOURCE CODE |
CURRENT PRINT ISSUE |
NEWSLETTERS
|
RESOURCES
|
BLOGS
|
PODCASTS
|
CAREERS
|
||||
|
||||
March 19, 2008
Apple Releases Huge Security UpdateApple has patched a huge number of security flaws in its latest security update released yesterday.
Apple yesterday released Security Update 2008-002 and an update to its Safari browser for both Mac OS X and Windows Vista. Both updates together patch nearly 90 vulnerabilities in Mac OS X, Safari, and third-party applications. Many of the repairs in Safari add additional URL validation to foil cross-site scripting. One issue (labeled CVE-2008-1010) dealt with a buffer overflow in WebKit's handling of JavaScript regexes, a flaw that could allow arbitrary code execution. Approximately 20 of the fixes in Security Update 2008-002 deal with ClamAV, a third-party antivirus application that shipped with OS X Server 10.5.
|
|
|
|||||||||||||||||||||||||
|
|
