A remote overflow exists in Mac OS X. The Quickdraw component fails to validate PICT image files resulting in a heap overflow. With a specially crafted file containing a malformed ARGB record, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Upgrade to version 10.4.9 or higher, as it has been reported to fix this vulnerability. In addition, Apple has released a patch for some older versions.

• Security Tracker: 1017760
• CVE ID: 2007-0588 (see also: NVD)
• Bugtraq ID: 22228
• Secunia Advisory ID: 24479
• VUPEN Advisory: ADV-2007-0930
• Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=305214
• Vendor Specific News/Changelog Entry: http://docs.info.apple.com/article.html?artnum=305214
• Other Advisory URL: http://security-protocols.com/sp-x43-advisory.php

• Tom Ferris - tommysecurity-protocols.com - Security-Protocols
• Mike Price - Foundstone