Leopard Mail May Include Tiger Security Flaw

November 20th, 2007 at 2:00 PM - News by Jeff Gamet

Heise Security says Appleis Mail application in Mac OS X 10.5 may include a security flaw that the company previously patched in Mac OS X 10.4. The flaw could allow an attacker to trick Mail users into running an application by disguising it as a JPEG email attachment.

Apple patched the flaw in Tigeris Mail application in March 2006, but somehow it seems the same security hole was reintroduced when Leopard shipped at the end of October.

The security company has developed a demonstration showing the flaw. The demonstration emails a harmless attachment that launches the Terminal application and displays the contents of the current directory.

This potential security flaw appears to impact Leopard users only. Tiger users with current updates installed are not impacted.

Commenting is not available in this section entry.

Recent Headlines - Updated November 8th

Sun, 11:59 AM: Mac Geek Gab Podcast - MGG 226: Magic Mouse, Apple Battery Secrets, Q&A
Sat, 7:58 PM: News - Apple TV 3.0.1 Update Fixes Missing Content Bug
Fri, 7:45 PM: Rumor - Taiwan Leak Shows Verizon UTMS/CDMA iPhone for Q3 2010
6:40 PM: News - iPhone Moves Into RadioShack
6:30 PM: News - Apple to Open Stunning Paris Apple Store in Le Louvre on Saturday
5:43 PM: Free on iTunes - Dictionary, Dictionary, Dictionary, And More
4:09 PM: John Martellaro's Blog - Particle Debris (week ending 11/6) Failure IS an Option
3:32 PM: Games - The Latest App Store Games: Gravity Sling, RocketBird, Ground Effect, Checkers!
2:25 PM: Games - Star Soccer 2010 for Mac Puts Gamers in Role of Up-and-Coming Player
2:15 PM: How-To - The Mysteries of Rosetta Housekeeping
1:33 PM: News - iPhone Game Developer Sued for Collecting User’s Cell Numbers
1:17 PM: Games - Warhammer Online Expands Trial Play Option

The Mac Observer Reader Specials

TypeStyler For Mac OS X is Now Shipping! Download The Free Fully Functional 60 Day Tryout at www.typestyler.com
RamJet Memory: Mac Pro 8-core 8GB Kit $199.99, 4GB Kits $109.99! Sale on MacBook and MacBook Pro 8GB kits $549.99! New MacBook DDR3 2GB for $49.99. iMac and Mac mini 4GB Kits for $79.99! 1TB SATA Hard Drives for $109.99! Click here
OWC: We Make DIY Upgrading Easy! Maximize your Apple MacBook / MacBook Pro. Up to 8.0GB Memory, up to 1.0TB HD & More. Easy Guide + Free, Detailed Installation Videos. Click here
If you're using a Mac, then you've gotta check out Full Tilt Poker for Mac. This Full Tilt Poker bonus code does the unthinkable, it actually rewards!
For the latest Apple products use Ciao, a price comparison website, to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate mobile phones like the Apple iPhone.
Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.

Apple Stock Quote

AAPL: $194.34. Change: +0.3099.
(Prices delayed up to 20 minutes.)
Discuss in our Apple Finance Board

Hot Topics

What's the buzz? These articles have TMO readers talking.

Psystar to Court: Just Say We’re Legit - 25 Comments
AT&T Sues Verizon Alleging Misleading “There’s A Map For That” Ads - 18 Comments
Analyst: No iPhone for Verizon - 18 Comments
CNET Dubs iPhone the Worst Phone in the World - 16 Comments
Apple Magic Mouse is no Magic Bullet - 16 Comments
Fortune CEO of the Decade: Steve Jobs - 12 Comments

TMO Express

Join the TMO Express Daily Newsletter to get the latest Mac headlines in your e-mail every weekday. Find out more!

Top Deals From DealBrothers.com

Recent Features

Get the latest installments of TMO Columns, Podcasts, & Blogs.

© The Mac Observer, Inc. -- All rights reserved. All information presented on this site is copyrighted by The Mac Observer, Inc. except where otherwise noted. No portion of this site may be copied without express written consent. Other sites are invited to link to any aspect of this site provided that all content is presented in its original form and is not placed within another frame. The Mac Observer is an independent publication and has not been authorized, sponsored, or otherwise approved by Apple, Inc.