Alert GCSA-09111 - Aggiornamento Apple per Java per Mac OS X

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


************************************************************************

       Alert ID : GCSA-09111
           Data : 04 Dicembre 2009
         Titolo : Aggiornamento Apple per Java per Mac OS X

************************************************************************


:: Descrizione del problema

Apple ha rilasciato un aggiornamento per Java per Mac OS X. Tale aggiornamento 
risolve alcune vulnerabilit che potrebbero essere sfruttate per accedere ad 
informazioni sensibili, oltrepassare restrizioni di sicurezza e potenzialmente 
per causare un attacco DoS o compromettere un sistema utente.


:: Software interessato

Apple Macintosh OS X


:: Impatto

- - Security Bypass
- - Exposure of sensitive information
- - Denial of Service
- - possibile compromissione del sistema


:: Soluzione

Applicare gli aggiornameti Apple:

Java per Mac OS X 10.6:
http://support.apple.com/kb/DL972

Java per Mac OS X 10.5:
http://support.apple.com/kb/DL971


:: Riferimenti

Apple:
http://support.apple.com/kb/HT3969
http://support.apple.com/kb/HT3970

Secunia:
http://secunia.com/advisories/37581/
http://secunia.com/advisories/37231/

Mitre's CVE ID:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2843
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3728
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3865
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3866
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3872
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3874
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3875
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3877
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3884

-----BEGIN PGP SIGNATURE-----

iQCVAwUBSxjxvPOB+SpikaiRAQI9FQP/RXGE1DHaG/6WUe8mRjYQkPPlP4bjIjfV
rdrj7A4uyJSYMp3O3OB3NHmZUNMSPgEFozmjhL/ZMA7K46Vq7lkr1o64YOIjwFhE
QDBmALkhUAUgXit+9ib3CqiHOnWY5G6SDz422gcfFBeFdocwiyyfQTlX5/JYGTPt
NIOgS8iswF0=
=jcaT
-----END PGP SIGNATURE-----