All the latest UK technology news, reviews and analysis
|
|
|
22 Feb 2006
A new critical threat to Apple's OS X operating system has surfaced that could allow attackers to compromise systems without any user interaction.
The flaw affects the way OS X handles meta data for Zip archives. The application considers the files to be safe and will automatically open them, allowing attackers to embed script code that the OS will execute without the user's knowledge.
Attackers could exploit the vulnerability to install software such as spyware or rootkits.
A system could become infected when users visit specially crafted websites or when saving any infected Zip archive. The attack requires no user interaction and uses the Terminal application, which is the OS X command shell.
Users of older versions of the operating system will first receive a warning asking whether they wish to execute the applications, but Apple removed this feature in the current 10.4 version of the operating system.
Security firm Secunia gave the flaw its highest rating of 'extremely critical', and said in an advisory that users can neutralise the threat by disabling the auto-run feature in the Safari browser.
But the SANS Internet Storm Center later issued a warning that this workaround will fail fully to protect users.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Are you a versatile software tester, who wants to work...
An excellent opportunity has arisen working for a prestigious...
Linux System Administrator - RedHat - Apache - Scripts...
MetaTrader 4 MT4 Technical Support Engineer required...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
WHOA (Sarcasm)
OMFGBBQ they found a flaw in the OS X. Still have like a 1 to 1000 ratio with Windows, last I checked the Virus Ratio is 2 to 700,000. WHOA! Better go by me a DELL. Dude, I got a DELL! Dude, my DELL crashed! Dude, STFU already.
Posted by: Macfan23433 23 Feb 2006
Can't tell the difference between the OS and browser?
The bug is in Safari, not OS X. While Safari is Apple's browser of choice, it isn't part of the OS, and many users don't run it. If you can't tell the difference between an operating system and an application, you probably shouldn't be reporting on technical issues.
Posted by: keith bierman 23 Feb 2006
About time
Finally these people will might that their OS is not perfect. In the past there have not been many viruses for Mac simply because no one cared enough about the Mac to write them.
Posted by: Mark 22 Feb 2006