ImageIO PSD Memory Corruption - CVE-2010-1845 11/11/2010 Dominic Chell of NGS Secure has discovered a high risk memory corruption vulnerability affecting the ImageIO rendering framework. Viewing a maliciously crafted PSD image may lead to an unexpected application termination or arbitrary code execution. This issue can be remotely (client-side) exploited through any application using the framework including Mail, Safari and QuickLook. Versions affected include: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4 Apple has released a patch that addresses these issues. The announcement of this patch can be found here: http://support.apple.com/kb/HT1222 Patches can be downloaded from the following links. Apple security updates are available via the Software Update mechanism: http://support.apple.com/kb/HT1338 Apple security updates are also available for manual download via: http://www.apple.com/support/downloads/ NGS Secure are going to withhold details about these flaws for three months. Full details will be published on 11/02/2011. This three month window will allow Apple customers the time needed to test and apply the patch set before the details are released to the general public. This reflects NGS Secure's approach to responsible disclosure. NGS Secure Research http://www.ngssecure.com/ ________________________________ Dominic Chell Senior Security Consultant NGS Secure 52 Throwley Way Sutton, SM1 4BF Telephone: +44 (0)208 401 0070 Mobile: +44 (0)7545502538 Fax: Website: www.ngssecure.com Email: Dominic.Chell@ngssecure.com [http://www.nccgroup.com/_client/images/global/NGS%20Secure.jpg] ________________________________ This email is sent for and on behalf of NGS Secure Limited (Registered in England CRN: 04474600). The ultimate holding company is NCC Group plc (Registered in England CRN: 4627044). Registered Office: Manchester Technology Centre, Oxford Road, Manchester, M1 7EF Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than NCC Group or the sender of its existence. For more information about NGS Secure please visit www.ngssecure.com P Before you print think about the ENVIRONMENT