This effectively provides attackers with root access, allowing them to install applications and change system settings.' More. A malicious user with access to a system could use the flaw to execute unauthorized code in privileged programs. It affects the Mach exception ports which handle kernel errors in OS X. 'The flaw is identified as CVE-2006-4392. Say hello with an instant message, voice or video call, no matter what device they use Skype on. According to a Skype bulletin, 'this behavior is due to incorrect handling of arguments passed to a function in the Skype URI (uniform resource identifier) handler than initializes an alert panel.'' More.Īpple patch overlooks Mac OS X 10.3 iT News reports that Mac OS X 10.3 continues to suffer from a security vulnerability which the vendor repaired on newer versions of the operating system last Friday, a posting on the milw0rm security exploit site has warned. 'The flaw, reported by security researcher Tom Ferris, is caused by a malformed URL in the free voice over IP (VoIP) service that, if followed, could lead to a user's system being compromised. Skype patches Mac OS X flaw SC Magazine reports that updating to the latest version of Skype for Mac OS X solves a 'highly critical' vulnerability that could lead to the remote execution of arbitrary code, vulnerability monitoring firm Secunia said Monday in an advisory. A full version of Skype for Mac OS X is expected before the end of this year, and Skype is prepared to add features or make changes as a result of the beta trials.

Skype for mac os x