Camera Phones Plaza

Bugs that could allows users to cause a denial of service or arbitrary code execution in iChat where fixed this week because Apple released Security Update 2007-005.

Apple’s iChat application was found to have a buffer overflow vulnerability in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) code used to create Port Mappings. An attacker on the local network could trigger the overflow and cause an unexpected application termination or arbitrary code execution, as well as a denial of service.

Like the iChat issue, an attacker on the local network could trigger the overflow and cause an unexpected application termination or arbitrary code execution, as well as a denial of service.
Separate problems with vpnd and the ppp daemon have been addressed that allowed a local user to obtain system privileges, as well as denial of service vulnerabilities in the Ruby CGI library.

Other changes in the underpinnings of the operating system have addressed as well, including issues with BIND, CoreGraphics, crontabs, fetchmail, texinfo and others.
The update is available from Mac OS X’s built-in software update mechanism.