Apple fixes iPhoto bug

By
Follow google news

Apple this week released a security update for iPhoto, patching a flaw that could allow remote code execution.


iPhoto version 7.1.2 fixes a format string vulnerability that can be exploited when an end-user processes photocast subscriptions.

A cyberattacker can take advantage of the flaw by enticing a user to subscribe to a maliciously crafted photocast, a media-sharing feature in iPhoto, Apple disclosed on Monday.

The Cupertino, Calif.-based technology company credited researcher Nathan McFeters of Ernst & Young's Advanced Security Center with reporting the flaw.

Apple released its most recent set of patches last month, distributing a new version of QuickTime to plug four vulnerabilities in the media player.

The same day, the computing and entertainment giant made public iPhone and iPod Touch versions 1.1.3, which fixed three flaws in the gadgets, including a bug in Safari, Apple's web browser.

See original article on scmagazineus.com

Add iTnews as your trusted source

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Services Australia describes fraud, debt-related machine learning use cases

Services Australia describes fraud, debt-related machine learning use cases

Attacker embeds Claude Code in mass credential harvesting op

Attacker embeds Claude Code in mass credential harvesting op

'Copy Fail' Linux privesc bug lay dormant in kernel since 2017

'Copy Fail' Linux privesc bug lay dormant in kernel since 2017

Medibank reveals attack vector and cost of 2022 security breach

Medibank reveals attack vector and cost of 2022 security breach

Log In

  |  Forgot your password?