Security Updates, Notices for Mac OS X

Myrrh writes "eEye reports they discovered a heap overflow in QuickTime 6.5, which 'allows a remote attacker to reliably overwrite heap memory with user-controlled data and execute arbitrary code.' Now's a swell time to visit Apple and download the updates for both programs." Also, Apple today released Security Update 2004-05-03, which includes updates for AFP Server, CoreFoundation, and IPSec, and is, like the QuickTime 6.5.1 update, available via Software Update.

Comments

In fairness, though

[mkavanagh2]

Mac OS X does get less security problems than any other OS..perhaps apart from BeOS, but I think we can guess why BeOS doesn't get holes found ;)

Re:In fairness, though

[prockcore]

I think we can guess why BeOS doesn't get holes found

Is it because no one is able to get their ethernet cards to work under BeOS?

Hmm...

[hookedup]

'allows a remote attacker to reliably overwrite heap memory with user-controlled data and execute arbitrary code.' damn that apple, even their exploits are reliable!? i'm really thinking about making the switch..

Re:Hmm...

[ariel5000]

I don't know about you, but i think that the only reliable things about Windows are the exploits.

What can I say?

[photoblur]

I guess Macs are just more reliable computers all around...

*ducks*

bad updates

[Anonymous Coward]

so what are these updates going to break? let's start a pool.

Re:bad updates

[sld126]

It always makes me laugh when windoze people switch.

"It didn't say to reboot, but I'd feel better"
"Yes, I need to install everything, even if I never buy an iSight"

I just stand amazed that they've been so abused that they don't know anything better.