iPhoto version 7.1.2 fixes a format string vulnerability that can be exploited when an end-user processes photocast subscriptions.
A cyberattacker can take advantage of the flaw by enticing a user to subscribe to a maliciously crafted photocast, a media-sharing feature in iPhoto, Apple disclosed on Monday.
The Cupertino, Calif.-based technology company credited researcher Nathan McFeters of Ernst & Young's Advanced Security Center with reporting the flaw.
Apple released its most recent set of patches last month, distributing a new version of QuickTime to plug four vulnerabilities in the media player.
The same day, the computing and entertainment giant made public iPhone and iPod Touch versions 1.1.3, which fixed three flaws in the gadgets, including a bug in Safari, Apple's web browser.
See original article on scmagazineus.com
Apple fixes iPhoto bug
Apple this week released a security update for iPhoto, patching a flaw that could allow remote code execution.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
SPONSORED RESOURCES
Closing the cyber security execution gap: How IT leaders are building cyber resilience
Tech Skills Report
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
