May 18, 2004 5:43 PM PDT
Mac OS X vulnerable to one-two combo attack
- Related Stories
-
Apple criticized for security advisories
May 4, 2004 -
Apple patches QuickTime flaw
April 30, 2004 -
OS X flaw may leave Macs open to virus attacks
April 9, 2004
The flaws could be used to create a virus that spreads through a Web link sent via e-mail messages. An attacker would have to also create a Web site with special programming.
Get Up to Speed on...
Enterprise security
Get the latest headlines and
company-specific news in our
expanded GUTS section.
"Since these 'exploits' are on the rise and it's so easy to protect yourself--here you go," lixlpixel's posting said.
Apple refused to comment on the vulnerability, except to publish a release saying that such reports are taken "very seriously at Apple and we are actively investigating this potential security issue."
Apple has twice been criticized for its downplaying of security issues and its lack of response to the concerns of the security industry.
Security information service Secunia rated the issue "extremely critical," on Tuesday, because online discussions have pointed out many different ways to exploit the flaws. Secunia recommended that Mac users avoid visiting untrusted Web sites and said Mac administrators and others avoid surfing the Internet while signed on to their networks as privileged users.
Secunia verified the flaws in Apple's operating system by viewing malicious code using Internet Explorer for the Mac and Safari.
More about this issue can be found in the advisories section of Secunia's Web site.
See more CNET content tagged:
Apple Computer,
Apple Macintosh,
attacker,
flaw,
Apple Mac OS
Don't rip & replace. VoIP as you are
than windows. How many times have we seen reports of
Windows exploits as compared to Mac? keep on counting.
download the program "Don't Go There GURLfriend." Then click
the Patch button. It will alter the offending line in Help Viewer
and secure your Mac.
general preferences.
2.Download Misfox or MoreInternet (please use this
MoreInternet mirror), or some other application which allows
you to set your internet helper preferences.
3.Set the protocol preference for 'help' to Chess or TextEdit, or
something other than the Help application.