Security researcher Tom Ferris has published details about seven security vulnerabilities in Apple's OS X operating system
Researcher challenges Apple's security record with seven bug disclosures

Seven unpatched OS X flaws exposed

OS X security image challenged

Tom Sanders in California

Security researcher Tom Ferris has published details about seven security vulnerabilities in Apple's OS X operating system, including proof-of-concept code. 

The most severe flaw affects the Safari browser, which could be targeted by attackers to execute code on a system or cause the browser to crash.

Advertisement

The other flaws were found in several OS X features. An attacker could, for instance, use a specially crafted Tiff image file to cause an image viewer or editor to crash. Similar issues affect the .bmp and .gif image file formats.

An error in the way that OS X handles archives such as Zip files creates an opportunity for attackers to crash applications or to execute arbitrary code.

The researcher gave one of the flaws a severity rating of 'high' and rated the remaining six 'medium'.

Security organisations Secunia and the Sans Internet Storm Centre claimed that the vulnerabilities are "highly critical" because they allow attackers to execute code on a system or can cause a denial of service attack.

"There seem to be some problems with the claimed 'solid as a rock' Unix operating system," Ferris wrote on his website when he announced the vulnerability disclosure earlier this month. 

"Getting Safari to crash in many different spots is trivial, whereas Firefox is very tough."

Apple uses the 'Solid as a rock' slogan on its website to describe OS X's security record. 

The application has suffered only a few isolated virus attacks which have failed to cause any harm, but some experts have warned that the software will become a more attractive target as it gains market share.

Ferris said that he reported the vulnerabilities to Apple at the beginning of the year and claimed that they will be fixed in the next security release.

A spokesman for Apple said that he was aware of Ferris's report, but was unable to comment on the vulnerabilities.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

Social networking

Summit: How businesses should manage their brands online

In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies

RIM discusses new developer tools

Blackberry exec on the latest offerings for programmers

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Rich Media

Summit: Is the ECM industry up to the information overload challenge? Part 2

In part two of our summit special, Autonomy, Alfresco and...

Video: Mike Altendorf, EMC Consulting interview

As part of the V3 Summit, Altendorf discusses customer experiences...

Summit: IBM's Nick Davis on collaboration

IBM's collaboration technologist outlines tools that can aid working together

adobe

Adobe cuts more jobs

Nearly 700 to go worldwide

Primary Navigation