FYI…

- http://isc.sans.org/diary.php?storyid=1282
Last Updated: 2006-04-21 19:41:56 UTC
"Multiple vulnerabilities have been reported in Apple Mac OS X and applications. Proof of Concept code has already been posted along with the information regarding the vulnerabilities. At this time no patches or workarounds appear to be available for the majority of the vulnerabilities. The impact and severity of the exploits are not yet known.

Links to advisories:
> Apple OS X 10.4.5 .tiff "LZWDecodeVector ()" Heap Overflow
- http://www.security-protocols.com/sp-x24-advisory.php
> Apple OS X BOM ArchiveHelper .zip Heap Overflow
- http://www.security-protocols.com/sp-x25-advisory.php
> Apple OS X Safari 2.0.3 Multiple Vulnerabilities
- http://www.security-protocols.com/sp-x26-advisory.php
> Apple OS X 10.4.6 "ReadBMP ()" .bmp Heap Overflow
- http://www.security-protocols.com/sp-x27-advisory.php
> Apple OS X 10.4.6 "CFAllocatorAllocate ()" .gif Heap Overflow
- http://www.security-protocols.com/sp-x28-advisory.php
> Apple OS X 10.4.6 .tiff "_cg_TIFFSetField ()" DoS
- http://www.security-protocols.com/sp-x29-advisory.php
> Apple OS X 10.4.6 .tiff "PredictorVSetField ()" Heap Overflow
- http://www.security-protocols.com/sp-x30-advisory.php …"

EDIT/ADD:
- http://secunia.com/advisories/19686/
Release Date: 2006-04-21
Critical: Highly critical
Impact: DoS, System access …
Solution:
Do not visit untrusted web sites, and do not open ZIP archives or images originating from untrusted sources…"

:ph34r: