Apple Computer Inc. late Tuesday shipped a massive Mac OS X update to correct security flaws in several Internet-facing components, including multiple code execution bugs in the Safari Web browser.
In all, Apple's Security Update 2005-009 addresses 13 vulnerabilities affecting Mac OS X (client and server).
Security alerts aggregator Secunia Inc. rated the update as "highly critical" and warned that malicious hackers could exploit the flaws to launch security bypass, cross-site scripting, spoofing, data manipulation, information exposure, denial-of-service and system access attacks.
Two of the four Safari patches can lead to arbitrary code execution, Apple acknowledged in an alert.
|