Security Architecture, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Vulnerability Management, Patch/Configuration Management, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Apple issues AirPort Extreme patch

March 9, 2007

By Dan Kaplan

Apple has issued a fix for its wireless networking solution, AirPort Extreme, to complement a similar patch delivered earlier this year.

The update, released Thursday, corrects a vulnerability involving an out-of-bounds memory read error that could occur when processing wireless frames.

"An attacker in local proximity may be able to trigger a system crash by sending a maliciously crafted frame to an affected system," according to an Apple advisory.

The flaw impacts the Core Duo version of Mac mini, MacBook and MacBook Prop computers that run on a wireless connection. Core 2 Duo versions are not affected.

Thursday’s fix is identical to the one released in January but includes a non-security update for "a compatibility issue when using certain third-party access points configured" to run wired equivalent privacy, a wireless networking standard.

Click here to email reporter Dan Kaplan.