Apple fixes three iLife flaws

Apple released an update on Monday for iLife 8.0 and Aperture 2 running on Mac OS v10.4.9 through v10.4.11.

The update does not affect those running Mac OS X v10.5.5. The update affects system software components shared by all iLife '08 applications and, in most cases, the specific vulnerabilities could lead to application termination or arbitrary code execution. iLife Support 8.3.1 may be obtained from the Software Update pane in System Preferences or Apple's Software Downloads Web site.

ImageIO-1
This patch affects users of iLife 8 or Aperture 2 running on Mac OS v10.4.9 through v10.4.11. This update addresses the security issue detailed within CVE-2008-2327 in which viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. The issue has already been addressed in systems running Mac OS X v10.5.5. Apple credits itself for finding the vulnerability.

ImageIO-2
This patch affects users of iLife 8 or Aperture 2 running on Mac OS v10.4.9 through v10.4.11. This update addresses the security issue detailed within CVE-2008-2332 in which viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution. The difference from the previous advisory is that this one involves a memory corruption issue exits in the handling of TIFF images. The issue has already been addressed in systems running Mac OS X v10.5.5. Apple credits Robert Swiecki of Google Security Team for finding the vulnerability.

ImageIO-3
This patch affects users of iLife 8 or Aperture 2 running on Mac OS v10.4.9 through v10.4.11. The update addresses the vulnerabilities detailed within CVE-2008-3608 in which viewing a large, maliciously crafted JPEG image may lead to an unexpected application termination or arbitrary code execution. Specifically, a memory corruption issue exists in ImageIO's handling of embedded ICC profiles in JPEG images. The issue has already been addressed in systems running Mac OS X v10.5.5. Apple credits itself for finding the vulnerability.

[joetesta70]

Security issues, security issues, security issues.

Hi, I'm a Mac. LOL!

[Perry_Clease]

"by joetesta70 November 10, 2008 6:25 PM PST
Security issues, security issues, security issues.

Hi, I'm a Mac. LOL!"

No Joe, you are not a Mac, you are a troll and a very immature one at that.

[gefitz]

No, he's not a troll, just returning all the crap he hears on an almost daily basis from Apple about security issues.

Apple programmers aren't any better or worse than app programmers in an other world...if it was worth the effort hackers would be all over it exposing just as many holes.

[Below_The_Belt]

http://mac.blorge.com/2008/11/09/experts-baffled-by-lack-of-malware/

[Ipopngraphics]

after running through the first 100 news bits that came up when I launched CNET... I found 41 references to flaw issues with Vista. I found one referencing flaw issues with OS X.... nuf said.

[Khaled A.]

thanks for the notice, running the Software Update...

[Ipopngraphics]

Yes he IS a troll, but it's ok, the opportunities to pick on Mac software are so few and far between, we can be gracious enough to allow him the mind-blowing satisfaction of getting to say something bad about Apple and get it off his chest. The sooner he does that the sooner he'll go back to his roach infested sofa and bury himself in things that require the same amount of intelligence as opening a paper bag.

[Thomas, David]

You know what? lpopngraphics is right, let them spout. Troubled souls need some way to vent their frustrations.

[Vegaman_Dan]

And elitist snobs like you need the time to update your OS and then come up with ways to pretend it never happened and stick your head back in the sand.

Really, wake up and smell the rotting fruit sometime.

[Ipopngraphics]

Elitist? ROFLMAO... RIGHT! I don't think my income qualifies me for such a lofty title, but thanks anyways. You think I buy Macs because I am rich? I buy them because I want the most for what little money I do have. Perhaps that "rotting smell" is something a little more close to home, I've heard that jealousy sometimes has that fermenting fruit aroma... or perhaps a shower might help....

[ittesi259]

Ya know, the fanboys make me embarrased to be a Mac user but the hateful other side make me glad I switched. Considering the fact that anyone with a current OS (already addressed in 10.5.5) is not affected thats not bad. I don't exactly remember any threads from yesterday from hateful windows people defending that MS had yet another monthly patch with even more vulnerabilities. Lets not forget this update had nothing to do with the OS but applications.