Researcher finds a mitt full of Mac bugs
A Mission Viejo, California, security researcher has posted code that exploits a number of newly discovered and unpatched bugs in the Mac OS X platform.
The software, posted Friday by independent researcher Tom Ferris, could be used to crash applications or even run unauthorized code on the Mac by taking advantage of bugs in the Safari browser and Mac OS X operating system. Ferris's "proof of concept" code exploits a total of seven bugs.
Apple Computer Inc. has already been made aware of the bugs and plans to fix them in "the next security release," Ferris said in a posting to his Security-protocols.com blog. http://www.security-protocols.com/
"There [seem] to be some problems with the claimed solid-as-a-rock Unix OS," he wrote on his blog. "Getting Safari to crash in many different spots is trivial, as where Firefox is very tough."
Long considered to be more secure than Microsoft Corp.'s Windows operating system, Mac OS X has increasingly been the focus of security researchers like Ferris. In February a number of malicious programs, including one called OSX/Leap, were released targeting the Macintosh.
The SANS Institute's Internet Storm Center rated Ferris's bugs as "highly critical," and warned that there are no patches or workarounds available for the majority of these vulnerabilities. http://isc.sans.org/diary.php?storyid=1282&rss
Ferris made headlines earlier this year when he discovered a bug in the Internet Explorer 7 Beta 2 preview browser within minutes of the product being released.
Apple representatives were not immediately available to comment for this story.
IDG News Service
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
Esther Schindler
If the comments are ugly, the code is ugly
claird
SVG a graphics format for 21st century
pasmith
Take Chrome OS for a test spin
Sandra Henry-Stocker
Solaris Tip: Have Your Files Changed Since Installation?
jfruh
Android fragments vs. the iPhone monolith
mikelgan
What Gizmodo missed about the Pro WX Wireless USB disk drive
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.













