Official warning on Mac code bug (BBC) {DMG bug}

[eppur_se_muova]

The federal US computer security watchdog has issued a warning about a bug in Apple's OS X operating system.
The US Computer Emergency Readiness Team (US Cert) issued the alert after security researchers produced code that could exploit the DMG bug.
***
The warning from US Cert said the memory corruption caused by the bug could make a computer unstable or allow an attacker to hijack it. It urged users to avoid downloading DMG files, which bear a .dmg suffix, from unknown sources.

The bug even affects machines that are patched with the latest fixes.

Apple has yet to provide a fix for the DMG bug though a workaround is known which should stop computers falling victim.

The bug has only been proved to work under laboratory conditions. No cases of it being exploited in the wild are known and no users are thought to be at risk. The availability of the exploit code might tempt some malicious hackers to craft webpages that take advantage of it.
***
more: http://news.bbc.co.uk/2/hi/technology/6187302.stm

[central scrutinizer]

1. Let the Mac vs. PC flame wars begin

[billbuckhead]

2. "The bug has only been proved to work under laboratory conditions. "

:rofl:

[tridim]

3. Impossible. Macs are perfect and NEVER have bugs

Never ever, never! Everyone knows that only PC's have bugs.

I'm going to go have sex with my Mac now because it's so gawd damned bug free.

[SpiralHawk]

5. Right on tridim: I agree. Only PCs have bugs

Glad to join in with the ENLIGHTENED ONES, like you.

MAC UBER ALLES!

[sugapablo]

4. OLD news

This was reported back in September as a .pkg (package installer) exploit. Installing new software is always hazardous if it's from unreliable sources.

http://apple.slashdot.org/article.pl?sid=06/09/16/182207

[Nomad559]

6. Mac OS X Receives Unwanted Attention

Mac OS X Receives Unwanted Attention
http://www.securitypronews.com/insiderreports/insider/spn-49-20061122MacOSXReceivesUnwantedAttention.html

New exploit published for Mac OS X
http://www.computeractive.co.uk:80/vnunet/news/2169228/exploit-published-macos

Several vulnerabilities in Mac OS X
http://www.heise-security.co.uk/news/81644

Mac OS X flaw: US gov adds warning
http://software.silicon.com:80/security/0,39024655,39164342,00.htm

Adware targets Mac OS X
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1231838,00.html

[LeftCoast]

7. Essentially this is saying don't run an executable file from an unknown source

Um...Duh!?

Doesn't matter HOW secure you make a computer if you run malware you're going to get screwed.