• info
• discussion
• exploit
• solution
• references

Apple CoreFoundation Unspecified Environment Variable Buffer Overflow Vulnerability

Solution:
Apple has released an advisory (APPLE-SA-0024-09-07) along with fixes to address this, and many other issues. Please see the referenced advisory for further information.


Apple Mac OS X 10.2.8

• Apple SecUpd2004-09-07JagClient.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04717&plat form=osx&method=sa/SecUpd2004-09-07JagClient.dmg

Apple Mac OS X Server 10.2.8

• Apple SecUpdSrvr2004-09-07Jag.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04716&plat form=osx&method=sa/SecUpdSrvr2004-09-07Jag.dmg

Apple Mac OS X 10.3.4

• Apple SecUpd2004-09-07PanClient.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04712&plat form=osx&method=sa/SecUpd2004-09-07PanClient.dmg

Apple Mac OS X Server 10.3.4

• Apple SecUpdSrvr2004-09-07PanL.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04713&plat form=osx&method=sa/SecUpdSrvr2004-09-07PanL.dmg

Apple Mac OS X 10.3.5

• Apple SecUpd2004-09-07PanMClient.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04715&plat form=osx&method=sa/SecUpd2004-09-07PanMClient.dmg

Apple Mac OS X Server 10.3.5

• Apple SecUpdSrvr2004-09-07PanM.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=04714&plat form=osx&method=sa/SecUpdSrvr2004-09-07PanM.dmg