bugtraq - NGS00015 Patch Notification: ImageIO Memory Corruption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <7E45577E4E72EC42BB3F8560D57E75510A576F@manexchprd01>
Date: Mon, 22 Nov 2010 19:18:20 +0000
From: "Research@...Secure" <research@...secure.com>
To: "bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>
Subject: NGS00015 Patch Notification: ImageIO Memory Corruption

ImageIO Memory Corruption - CVE-2010-1845

22/11/2010

Dominic Chell of NGS Secure has discovered a high risk memory corruption vulnerability affecting the ImageIO rendering framework. Viewing a maliciously crafted PSD image may lead to an unexpected application termination or arbitrary code execution. This issue can be remotely (client-side) exploited through any application using the framework including Mail, Safari and QuickLook.

Versions affected include:

Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4

Apple has released a patch that addresses these issues. The announcement of
this patch can be found here:

http://support.apple.com/kb/HT1222

Patches can be downloaded from the following links.

Apple security updates are available via the Software Update mechanism:
   http://support.apple.com/kb/HT1338

Apple security updates are also available for manual download via:
   http://www.apple.com/support/downloads/

NGS Secure are going to withhold details about these flaws for three months. Full details will be published on 22/02/2011. This three month window will allow Apple customers the time needed to test and apply the patch set before the details are released to the general public. This reflects NGS Secure's approach to responsible disclosure. 

NGS Secure Research
http://www.ngssecure.com/