iPhoto version 7.1.2 fixes a format string vulnerability that can be exploited when an end-user processes photocast subscriptions.
A cyberattacker can take advantage of the flaw by enticing a user to subscribe to a maliciously crafted photocast, a media-sharing feature in iPhoto, Apple disclosed on Monday.
The Cupertino, Calif.-based technology company credited researcher Nathan McFeters of Ernst & Young's Advanced Security Center with reporting the flaw.
Apple released its most recent set of patches last month, distributing a new version of QuickTime to plug four vulnerabilities in the media player.
The same day, the computing and entertainment giant made public iPhone and iPod Touch versions 1.1.3, which fixed three flaws in the gadgets, including a bug in Safari, Apple's web browser.
See original article on scmagazineus.com
Apple fixes iPhoto bug
Apple this week released a security update for iPhoto, patching a flaw that could allow remote code execution.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Unmanaged SaaS is now a compounding liability. Can your governance keep up?
.jpg&h=140&w=231&c=1&s=0)
Partner Content
How the Fair Work Commission safely deployed Agentic AI in weeks, not years
.jpg&h=140&w=231&c=1&s=0)
Partner Content
TeamViewer empowers public sector organisations to ‘shift left’ with TeamViewer ONE
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Why Implementing Identity Security Doesn't Have to Be Complicated
.png&w=120&c=1&s=0){kind=logo}
HPE Networking Day Sydney
iTnews Resilience, Rewired Breakfast
RIMPA Live Convention 2026
What’s Next?
iTnews Benchmark Security Awards 2026
.jpg&h=140&w=231&c=1&s=0)
