Slashdot Mirror

← Back to Stories (view on slashdot.org)

StuffIt 6.5.x and Earlier Allows Buffer Overflow

Posted by pudge on from the security-good-overflow-bad dept.

A user writes in that Aladdin Systems has announced that StuffIt, versions 6.5.x and earlier for Mac OS and Mac OS X, "may contain a flaw that would cause expanding certain maliciously crafted .zip archives to execute unwanted instructions or code." Aladdin notes that no such "trojan horses" have been reported. StuffIt Expander 7.0 is, as with previous versions, free to download and use.

5 of 62 comments (clear)

  1. Re:as I understand it by MalleusEBHC · · Score: 1, Offtopic

    There are still no known Mac OS X virii/trojans/worms last time I checked, but while this makes me very happy as an OS X user I'm not naive enough to believe this will be the case forever. Eventually a few will come our way just like on OS 9 and earlier OSes, but Windows will always get more because A) their security record is horrible and B) why write a virus for 5% of the market when you can hit 90% of the market?

  2. Re: Ermm... by Trayal · · Score: 0, Offtopic

    Will you please stop arguing on the side of the PC users? No really, I mean it. Seriously, who would want such a blathering, mindless, crude, rambling, idiotic, unevolved neanderthal on their side? Now shut your cheeks, hold your breath, and put youself out of our misery.

  3. Re: Ermm... tsarkon you butt fucking camel lick. by Trayal · · Score: 0, Offtopic

    Hmm...looks like I broke your brain. Sorry about that dude.

  4. Re:Only? by galaxy300 · · Score: 0, Offtopic

    It certainly depends on the user and what they happen to have installed on their machine. I know plenty of people who hardly know what a .zip file is, let alone what other compression formats are available. If they're using XP then they've got ZIP built right into the system, so that's probably what they're using.

    --
    seriouslyexcited.net
  5. Re:If you were my son, by MoneyT · · Score: 1, Offtopic

    Now you've done it, he's going to stalk you arround slashdot like he stalks me.

    --
    T Money
    World Domination with a plastic spoon since 1984