<http://schema.org/articleBody>
"&amp;lt;vc&amp;gt;&amp;lt;strong&amp;gt;Apple released a Mac OS X security update Tuesday that fixes a critical PDF vulnerability.&amp;lt;/strong&amp;gt;\r\n\r\nThe update, labeled &amp;lt;a href=\"http://support.apple.com/kb/HT4312\"&amp;gt;Security Update 2010-005&amp;lt;/a&amp;gt;, addresses a \"heap buffer overflow\" in the way CoreGraphics handles PDF files. The vulnerability could allow \"unexpected application termination or arbitrary code execution\" through a malicious PDF file.\r\n\r\nIt is unclear whether this fix is related to the PDF exploit on iOS 4 that allowed hackers to &amp;lt;a href=\"http://www.appleinsider.com/articles/10/08/01/hackers_release_browser_based_jailbreak_for_iphone_4.html\"&amp;gt;jailbreak&amp;lt;/a&amp;gt; the iPhone. Apple released an &amp;lt;a href=\"http://www.appleinsider.com/articles/10/08/11/apple_releases_ios_4_0_2_3_2_2_with_fix_for_pdf_exploit.html\"&amp;gt;update&amp;lt;/a&amp;gt; on August 11 that addressed the iOS PDF exploit.\r\n\r\nSecurity Update 2010-005 also patches a \"stack buffer overflow\" that would allow arbitrary code execution through a malicious embedded font. Both the PDF and the font vulnerabilities are fixed through \"improved bounds checking.\"\r\n\r\nAlso included in the update are several routine fixes to network security flaws.\r\n\r\nThe update affects Mac OS X Server 10.5, Mac OS X 10.5.8 , Mac OS X Server 10.6 , and Mac OS X 10.6.4."^^<http://www.w3.org/2001/XMLSchema#string>
<http://appleinsider.com/articles/10/08/24/apple_releases_mac_os_x_security_update_to_patch_pdf_exploit.html>