Apple's OS X Update Fixes Serious "Pwn2Own" Flaw

Our Internet security solution provider WatchGuard has recently issued a high severity alert regarding a serious “Pwn2Own” flaw that affects all current versions of OS X 10.5.x and OS X 10.6.x. This flaw resides in Apple Font Services (ATF), which is an OS X component used to handle and display embedded fonts. According to WatchGuard, an attacker can exploit this flaw by enticing a user to a malicious website. Ultimately, this could allow the attacker to execute code on the user’s computer with that user’s privileges.

WatchGuard recommends users apply the security update released by Apple to fix the issue. More information and instructions on how to apply this update can be found at OS X Security Update 2010-003.

To read more about security threats to Macs, please refer to our previous blog posts entitled Don't Be Lulled into a False Sense of Security, Apple Releases Security Updates to Fix Almost 100 Vulnerabilities in OS X, Apple Releases Security Update to Fix Critical Vulnerabilities in OS X, and Apple Releases Security Updates to Fix OS X Vulnerabilities.

If you would like additional information on WatchGuard and other security solutions provided by 3D, visit our website at www.3dcorp.us, email us at info@3dcorp.us, or call us at (360) 671-4906.

References: WatchGuard’s LiveSecurity Update “Apple’s OS X Update Fixes One Serious ‘Pwn2Own’ Flaw”, Apple’s OS X Security Update 2010-003.