mac os x

If an attacker can entice a user to visit an attacker controlled web page, the vulnerable ActiveX control could be invoked to download an attacker-modified package.

Apple today warned that its GarageBand software is leaking users’ Web activity to third parties and advertisers.The company shipped GarageBand 5.1 to plug the hole and advise users to tweak their Safari browser preferences to avoid data leakage.  Here’s the relevant information from Apple’s advisory:CVE-2009-2198: When GarageBand is opened, Safari’s preferences are changed to always [...]