Security researchers have discovered a serious, unpatched vulnerability in Mac OS X. The memory corruption bug creates a means for attackers to take control of even fully patched systems.

Flaws in the way the AppleDiskImageController handles corrupted DMG image structures could be exploited to trigger memory corruption and the execution of arbitrary code in kernel-mode, Secunia, the IT security consultancy, warns.

"A lot of OS X binaries can arrive as DMG files. They are complete file systems, and are automounted in a default configuration," The SANS Institute's Internet Storm Centre notes.

Security watchers advises Mac fans to deactivate the open "safe files" after downloading option in their Safari preferences as a workaround (as explained here), pending the release of appropriate security patches from Apple. Mac OS X version 10.4.8 systems are confirmed to be at risk and other systems might also be vulnerable.

The vulnerability, originally reported by the Month of Kernel Bugs Project, represents a rare example of an unpatched vulnerability affecting Apple systems. Windows users by contrast are, of course, all too familiar with the growing problem of so-called zero-day exploits. ®

Related stories

• Apple's Safari 3: a crashing experience for non-US users (12 June 2007)
• Apple patches security hole in QuickTime (2 May 2007)
• Updated QuickTime, not Safari, to blame for MacBook vuln (25 April 2007)
• Safari zero-day exploit nets $10,000 prize (20 April 2007)
• Unpatched bug bites QuickTime (3 January 2007)
• Month of Apple bugs planned for January (20 December 2006)
• Amazon.com mixes Marmite with .Mac (30 November 2006)
• Apple blocks Mac OS X security holes (29 November 2006)
• VoIP and IE risks star in SANS' threat list (16 November 2006)
• Apple patches Intel-based Macs' firmware (14 November 2006)
• Virus dances onto Mac OS X (6 November 2006)
• Web viruses drop off despite IE exploit flap (18 October 2006)
• Apple issues Mac OS X update (2 October 2006)
• Another day, another zero-day MS exploit (28 September 2006)
• Unofficial IE patch saves humanity (25 September 2006)
• Trojan targets 0-day Word vuln (5 September 2006)
• Unpatched enterprise security bugs proliferate (24 August 2006)