Apple on Thursday released a Security and AirPort update for Mac OS X that fixes vulnerability constitute in the company ’s wireless gadget driver . Apple said the issue found were the result of an internal audited account of the software system drivers and that no known exploit live for the issues accost in this update .
The internal audited account came as a result of claims by a senior research worker at SecureWorks that said he had let on a vulnerability in Apple ’s MacBook radio set software driver that would allow him to take control of the machine . SecureWorks by and by elucidate its stance and tell it had used a third - company driver and not Apple ’s number one wood .
Apple has maintained that SecureWorks has provided no proof that Mac drivers are vulnerable in any way .
“ They did not render us with any information to leave us to distinguish a specific problem , so we initiated an intragroup audit , ” Apple spokesman , Anuj Nayar , tell Macworld . “ Today ’s update preemptively tone our drivers against potential vulnerability , and while it addresses event found internally by Apple , we are open to get wind from security researcher on how to improve security on the Mac . ”
According to the update issued by Apple , two disjoined stack buffer store overrun subsist in the AirPort wireless driver ’s handling of misshapen frames . An assailant in local proximity may be able-bodied to trigger an overflow by injecting a maliciously craft frame into a wireless net . When the AirPort is on , this could lead to arbitrary code execution with system privileges .
This issue affect Power Mac , PowerBook , iMac , Mac Pro , Xserve , and PowerPC - based Mac mini computers equipped with wireless . Intel - based Mac mini , MacBook , and MacBook Pro computers are not regard .
A heap buffer overflow that existed could have allowed attackers on a wireless connection to cause system crashes , exclusive right elevation or arbitrary code execution .
This topic affects Intel - establish Mac miniskirt , MacBook , and MacBook Pro computers equip with wireless , but not the older Power PC - based system .
The update is useable via the Software Update chemical mechanism in Mac OS X.
