Over on bugtraq, there's an interesting new thread regarding vulnerabilities in Mac OSX widgets.

http://www.securityfocus.com/archive/1/484542/30/0/threaded
http://www.securityfocus.com/archive/1/484567/30/0/threaded

Essentially, widgets can "relax the Dashboard's JavaScript sandbox to enable the widget.system() call, which indeed amounts to the equivalent of system(3); i.e., if an attacker can take over the widget, the attacker can take over the user's account
(and, quite often, the system)."

 
Security Response Researcher
Focus-Apple Moderator
 
________________________________________
Todd D. Woodward
Technical Support Engineer
NetBackup Support
Symantec Corporation
www.symantec.com
Springfield, Oregon
________________________________________
Office: 541-335-7441
________________________________________

[ reply ]