:: Deepquest ::

Apple Security Advisory 2012-03-07-3 – Apple TV 5.0 is now available and addresses a libresolv library vulnerability that could lead to an unexpected application termination or arbitrary code execution.

Apple Security Advisory 2011-10-26-1 – QuickTime 7.7.1 is now available and addresses memory disclosure, arbitrary code execution, script injection, and various other vulnerabilities.

Apple Security Advisory 2011-07-20-2 – An iWork 9.1 update addresses multiple security issues. A buffer overflow existed in the handling of Excel files

Paul Harrington of NGS Secure has discovered a high risk vulnerability in Mac OS X Image RAW. Multiple buffer overflow issues existed in Image RAW’s handling of Canon RAW images. Viewing a maliciously crafted Canon RAW image may result in an unexpected application termination or arbitrary code execution.

Dominic Chell of NGS Secure has discovered a High risk vulnerability in Mac OS X ImageIO. An integer overflow issue exists in ImageIO’s handling of JPEG-encoded TIFF images