• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Zero-day flaw in Mac OS X discovered

zekrahminator

McLovin
Joined
Jan 29, 2006
Messages
9,066 (1.36/day)
Location
My house.
Processor AMD Athlon 64 X2 4800+ Brisbane @ 2.8GHz (224x12.5, 1.425V)
Motherboard Gigabyte sumthin-or-another, it's got an nForce 430
Cooling Dual 120mm case fans front/rear, Arctic Cooling Freezer 64 Pro, Zalman VF-900 on GPU
Memory 2GB G.Skill DDR2 800
Video Card(s) Sapphire X850XT @ 580/600
Storage WD 160 GB SATA hard drive.
Display(s) Hanns G 19" widescreen, 5ms response time, 1440x900
Case Thermaltake Soprano (black with side window).
Audio Device(s) Soundblaster Live! 24 bit (paired with X-530 speakers).
Power Supply ThermalTake 430W TR2
Software XP Home SP2, can't wait for Vista SP1.
Researchers have discovered a proof of concept security flaw in the way Mac OS X handles .DMG (Disk Image) files. A hacked file can be used to put the computer in an "exploitable memory corruption condition with potential kernel-mode arbitrary code execution by unprivileged users". Considering that Safari can operate DMG files, the flaw can be exploited remotely or locally. The flaw can be used to change system preferences, modify permission levels for various files/programs, and to compromise a system. Secunia rates the flaw "highly critical".

View at TechPowerUp Main Site
 
Top