Alert GCSA-06082 - Vulnerabilita' in Apple Mac OS X

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


***************************************************************************

     Alert ID : GCSA-06082
         Data : 02 Ottobre 2006
       Titolo : Vulnerabilita' multiple in Apple Mac OS X

***************************************************************************

- - Descrizione del problema:

   Il sistema operativo Apple Mac OS X ed alcuni applicativi
   per tale piattaforma sono affetti da vulnerabilita'.


- - Piattaforme e Software interessati:

   Apple Mac OS X 10.4.7 e versioni precedenti
   Apple Mac OS X Server 10.4.7 e versioni precedenti

   CFNetwork, Safari, Kernel, ImageIO, LoginWindow, System Preferences,
   QuickDraw Manager, Workgroup Manager


- - Impatto:

   Esecuzione remota di codice arbitrario
   Denial of Service
   Privilege elevation
   Accesso non autorizzato


- - Soluzioni:

   Per risolvere questi problemi la Apple ha rilasciato l'aggionamento
   Mac OS X 10.4.8. Installare l'upgrade tramite la
   Software Update feature del sistema operativo o scaricandolo da

   http://www.apple.com/support/downloads/
   http://docs.info.apple.com/article.html?artnum=106704


- - Riferimenti:

   Apple Security Advisory: APPLE-SA-2006-09-29
   http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
   Apple Security Update 2006-006:
   http://docs.info.apple.com/article.html?artnum=304460

   Mitre's CVE ID:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4387
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4390
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4391
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4392
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4393
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4394
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4395
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4397
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4399

   SecurityFocus Bugtraq ID:
   http://www.securityfocus.com/bid/20271/info
   http://www.securityfocus.com/archive/1/447396


-----BEGIN PGP SIGNATURE-----

iQCVAwUBRSEgpvOB+SpikaiRAQIZbQP+LwnhUl1BKY4O68ve+uoKNuiBqFphfqd2
jbl2rXHss7HWw+k5qoos8bBTtNZDg9BROP7otjl7Dir0sszVnufIsNjpbFV1AVj0
7Y85+F741x9d2WlOCGhDIuvWRL1pgTc6cGxNvp5z4Azf3uZwuOlrg/vYWD8ESZfG
BExx7qYzV/o=
=99GY
-----END PGP SIGNATURE-----