Apple ships critical security update hard on the heels of an upgrade to Safari browser.

It's officially Patch Day in the land of the Mac.

On the heels of the release of Safari 3.1, with patches for more than a dozen browser vulnerabilities, Apple has shipped a mega update for its flagship Mac operating system, fixing at least 80 documented vulnerabilities in a wide range of core components.

The Security Update 2008-002, available for Mac OS X desktop and server, covers several critical issues that could lead to remote code execution attacks.

On the desktop side, the Foundation bug (CVE-2008-0059) appears to be the most serious.  "Processing an X M L document may lead to an unexpected application termination or arbitrary code execution," Apple warns, noting that an attacker could use a booby-trapped X M L file to exploit a race condition in NSX M L.

On the server side, security experts are calling attention to a bunch of ClamAV and CUPS vulnerabilities that could cause remote compromise if mail or printer sharing is enabled.

Click here to read the rest of this article, on eWEEK.com.

Discuss Apple Update Covers Dozens of Mac OS X Vulnerabilities   >>> Be the FIRST to comment on this article!

>>> More Graphics Tools Articles          >>> More By Ryan Naraine