ALARM Group ALERT - click for a description of ALARM, The Computing Alert System Alert Number:  062507-01 Alert Date:  06/25/07 Alert Title:  Apple releases Security Update 2007-06 Update-to:   None OS/Platform/Application:  Mac OS X v10.3.9 (including server) Mac OS X v10.4.9 or later (including server) Category:  ALERT Severity: HIGH Attention:  Mac system Administrators, Desktop Support Personnel, Mac Users

Summary:  On June 21 2007 Apple released Security Update 2007-06.  This update addresses two vulnerabilities (one in WebCore, one in WebKit).  Successful exploitation of these vulnerabilities could result in the generation of cross-site scripting attacks and/or arbitrary code execution.  The most likely vector of exploitation would be the visitation of specifically-crafted websites.

Recommended Actions:   Mac System Administrators/users are encouraged to read the security update and (if appropriate) install the patches as soon as possible.

ITS Actions: N/A

Resources:

Apple Security Update 2006-07 info page:
http://docs.info.apple.com/article.html?artnum=305759

Apple downloads page:
http://www.apple.com/support/downloads/