While Mac is considered one of the safest operating systems available, an anonymous security researcher has taken up the challenge and has commented that he will release one kernel bug every day during the month of November.
He has disclosed the Zero-Day Exploit within Mac OS X dealing with handling of disk image (.dmg) files. The issue causes a severe memory corruption that can allow hackers to execute arbitrary code.
The anonymous has posted the bug in his blog in which he uses initials, ‘LMH’.
While Apple is still silent on the issue, security firm Secunia has rated the issue as ‘highly critical’ that is its second highest rating.
As LMH writes, the issue is remotely exploitable as Safari loads the DMG files from an external source such as visiting an URL. This can however be prevented by changing the Preferences and deactivating the functionality for opening safe files after downloading. Secunia has also recommended the same procedure for all the Safari users.
Via: betanews
