Alert GCSA-06018 - Apple Mac OS X Security Update 2006-003

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


*****************************************************************************

      Alert ID : GCSA-06018
          Data : 15 Maggio 2006
        Titolo : Vulnerabilita' multiple in Apple Mac OS X

*****************************************************************************

1) Descrizione del problema:

     Il sistema operativo Mac OS X ed alcuni applicativi
     per tale piattaforma sono affetti da vulnerabilita'.
     Per risolvere queste vulnerabilita' la Apple ha rilasciato
     il Security Update 2006-003.

2) Piattaforme, software o moduli interessati:

     Apple Mac OS X version 10.3.9 (panther)
     Apple Mac OS X version 10.4.5 (tiger)
     Apple Mac OS X version 10.4.6

     - Safari web browser
     - Apple Mail
     - ImageIO
     - BOM
     - CFNetwork
     - ClamAV
     - CoreFoundation
     - CoreGraphics
     - Finder
     - FTPServer
     - Flash Player
     - Keychain
     - LaunchServices
     - libcurl
     - MySQL Manager
     - Preview
     - QuickDraw
     - QuickTime Streaming Server
     - Ruby

     Anche versioni precedenti di Mac OS X potrebbero essere vulnerabili.


3) Impatto:

     Esecuzione di codice arbitrario, manipolazione di dati,
     denial of service, esposizione di dati sensibili,
     accesso non autorizzato al sistema e privilege escalation.


4) Soluzioni:

     Installare la Apple Security Update 2006-003 attraverso Apple Update
     http://docs.info.apple.com/article.html?artnum=106704
     http://www.apple.com/support/downloads/


5) Riferimenti:

     Apple - About Security Update 2006-003
     http://docs.info.apple.com/article.html?artnum=303737

     Mitre's CVE ID:
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1982
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1983
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1984
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1985
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1439
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1440
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1441
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1442
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1443
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1444
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1445
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1446
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1447
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1448
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1449
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1450
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1451
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1452
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1453
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1454
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1455
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1456
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1457
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1614
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1615
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1630
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2628
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0024
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1552
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2337


     Bugtraq ID: 17951
     http://www.securityfocus.com/bid/17951

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRGhtsPOB+SpikaiRAQJeSwP/f59C+Zr/LY0aS6unXIUuB69Rfb54uYgu
zJ+eOdoQGR7rMbAPlVfR3RgmHWx9wjSEmU3jD8SvmIu233RcJudOapPgPM/ho3bu
lYZcPKflL5QMDn8HawpFfChhU037LUAduW7hhD7A3yiVXhKhGQtf/m79ysR0f4+y
uYPg8pwmeHc=
=Vhw3
-----END PGP SIGNATURE-----