Apple released a king-sized shield update for Mac OS X on Thursday, a separate fix for its just-released Snow Leopard, and an update to the iPhone operating system. Some of the updates fix problems, but others seem to cause new ones.

Thursday’s updates fix 33 vulnerabilities in the Mac OS X Leopard operating system involving third-party applications such as Adobe Flash, Samba, MySQL and PHP. The Leopard update additionally addresses potential protection vulnerabilities in Alias Manager, CarbonCore, CUPS, ColorSynch,

ImageIO, Wiki Server, CoreGraphics and Launch Services.

Apple has a history of being haunted by vulnerabilities in third-party products. The key issues in the latest advisories are buffer overflows, integer overflows, and memory corruption.

Third-Party Headaches

Apple would serve itself well to figure out how to optimize the bundling of third-party applications and create some space amidst third-party apps and the Mac OS, according to Andrew Storms, director of defense […]

Orginal post by dhiram