iPhoto version 7.1.2 fixes a format string vulnerability that can be exploited when an end-user processes photocast subscriptions.
A cyberattacker can take advantage of the flaw by enticing a user to subscribe to a maliciously crafted photocast, a media-sharing feature in iPhoto, Apple disclosed on Monday.
The Cupertino, Calif.-based technology company credited researcher Nathan McFeters of Ernst & Young's Advanced Security Center with reporting the flaw.
Apple released its most recent set of patches last month, distributing a new version of QuickTime to plug four vulnerabilities in the media player.
The same day, the computing and entertainment giant made public iPhone and iPod Touch versions 1.1.3, which fixed three flaws in the gadgets, including a bug in Safari, Apple's web browser.
See original article on scmagazineus.com
Apple fixes iPhoto bug
Apple this week released a security update for iPhoto, patching a flaw that could allow remote code execution.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.png&h=140&w=231&c=1&s=0)
Partner Content
Is your website a commercial risk (and why it could be without you realising it)?
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
iTnews State of Security Breakfast comes to Sydney
.png&w=100&c=1&s=0)
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
