StuffIt 6.5.x and Earlier Allows Buffer Overflow

A user writes in that Aladdin Systems has announced that StuffIt, versions 6.5.x and earlier for Mac OS and Mac OS X, "may contain a flaw that would cause expanding certain maliciously crafted .zip archives to execute unwanted instructions or code." Aladdin notes that no such "trojan horses" have been reported. StuffIt Expander 7.0 is, as with previous versions, free to download and use.

Comments

Re:as I understand it

[MalleusEBHC]

There are still no known Mac OS X virii/trojans/worms last time I checked, but while this makes me very happy as an OS X user I'm not naive enough to believe this will be the case forever. Eventually a few will come our way just like on OS 9 and earlier OSes, but Windows will always get more because A) their security record is horrible and B) why write a virus for 5% of the market when you can hit 90% of the market?

Re:If you were my son,

[MoneyT]

Now you've done it, he's going to stalk you arround slashdot like he stalks me.