DMG Exploit on MacOSX 10.4.8 and How to "Fix"
Washington Post's Brian Krebs wrote today about a vulnerability in Mac OSX 10.4.8 concerning the way the OS works with files with a .DMG suffix which is a common file format used to install software.
When a user opens a .DMG file that has the malware loaded in it, the system can be exploited causing a kernel panic.
Read more about it here:
Exploit Released for Unpatched Mac OS X Bug
So What can we do?
If you are using Safari, you'll want to disable "Open Safe Files After Downloading" preference. This is a silly preference to have on and what makes me sad is that Apple has it on by default! Turn it off!
Now just because you've turned off that preference doesn't mean you're home free. Double-clicking to open the .dmg file will cause a kernel panic if the .dmg is loaded with the exploit. At least with the Safari preference OFF you won't get a kernel panic by just downloading the file right?
Useful? Then Digg It.
Del.icio.us | Technorati Tags: exploit, fix, mac osx, malware, osx, osx 10.4.8, tip, trick, vulnerability