Security Update 2007-002: Apple release security updates

Apple release security updates to block four MoAB exploits

Apple Inc. has released a series of security updates. The Security Update 2007-002 for Mac OS X addresses four vulnerabilities revealed by researchers during the Month of Apple Bugs.

Other updates fix issues with daylight saving changes and other flaws.

The company said in a release that the disk image files now undergo additional validation before being mounted. This would help in preventing a buffer overflow caused by maliciously-crafted volume name.

Apple further said that the UserNotificationCenter process now drops its group privileges immediately after launching. This would prevent it from being exploited by unprivileged local users to gain root privileges.

Apple also fixed two iChat vulnerabilities in these updates. The company also released Daylight Saving Time Update 1.0. this is to enable the Apple software to accommodate changes in Daylight Saving Time in the US and Canada effective next month.

The company also issued fixes for Java for Mac OS X 10.4, Release 5.