Remote iChat Exploit Patched

← Back to Stories (view on slashdot.org)

Posted by pudge on Friday September 17, 2004 @05:25AM from the gotta-restart-now-brb dept.

99BottlesOfBeerInMyF writes "Apple has released a security update to patch a hole in iChat. Apparently, correctly crafted links sent via iChat can execute programs if the path is known. If this allows for command line attributes to be included, it could be a pretty big hole; although it would still require some social engineering. The Apple description is here."

11 of 55 comments (clear)

Min score:

Reason:

Sort:

Re:social engineering by Anonymous Coward · 2004-09-17 05:48 · Score: -1, Offtopic

Mine's done. That link is just there for a friend. Look at his email address on the signup page when you click on the link if you don't believe me.

Chris
Re:social engineering by Anonymous Coward · 2004-09-17 06:01 · Score: -1, Offtopic

ROFL

Hint: change the url next time or use TinyUrl if you want me to click it.

Chris
Re:Wow... by PedanticSpellingTrol · 2004-09-17 06:12 · Score: -1, Offtopic

Shock and Awe...
Re:social engineering by Anonymous Coward · 2004-09-17 06:42 · Score: -1, Offtopic

I agree... I propose a google bomb.
Free iPods
Re:All I want to know is... by Anonymous Coward · 2004-09-17 07:40 · Score: -1, Offtopic

Because it replaced a core framework for handling urls. Lots and lots of other programs could potentially use it.
Re:social engineering by Anonymous Coward · 2004-09-17 07:59 · Score: -1, Offtopic

How hard is to to socially engineer the average mac user?

I dunno, but I'd sure like to "socially engineer" this iPod user - "it" might be "hard"!!
not work safe! by Anonymous Coward · 2004-09-17 08:24 · Score: -1, Offtopic

note the above work link is not work safe.
1. Re:not work safe! by Anonymous Coward · 2004-09-17 08:47 · Score: -1, Offtopic
  
  Well duh. If you didn't figure it out from the blatant innuendo, then you deserve to be caught looking at it from work. Still... nice, eh? :)
Patching holes by Anonymous Coward · 2004-09-17 09:03 · Score: -1, Offtopic

Forget about iChat, I'd like to "patch" this iPod user's holes!!
Re:social engineering by spicyjeff · 2004-09-17 14:17 · Score: 0, Offtopic

Actually, Alt is the same as Option on a Mac keyboard and F4 is also the 'lower volume' key. So Option+LowerVolume (Alt+F4) opens the sound control panel. Same for Option+F3 or F5 and then F1 and F2 for brightness opens the display control panel.
The greatest social engineering feat... by Anonymous Coward · 2004-09-18 03:23 · Score: -1, Offtopic

...has been what Microsoft has been feeding PC users all these years.

You just now get a firewall? LOL