Brief Hands-On Report--Apple Updated iWork, Pages to 1.0.2 and Keynote to 2.0.2

The updates are available for download via the System Preferences Software Update pane if you have Pages and Keynote 2 installed. There were no standalone updaters available at publication time. Pages 1.0.2 addresses issues with page navigation and organization. Keynote 2.0.2 corrects a security issue:

CVE-ID: CAN-2005-1408
Available for: Keynote 2, Keynote 2.0.1
Impact: A maliciously modified Keynote presentation could be constructed to retrieve files from the local system.
Description: With a specially crafted Keynote presentation and the use of the "keynote:" URI handler, it is possible that local files could be read and then sent to an arbitrary network location. This issue has been addressed in two ways: References to external resources have been limited, and the registration of the "keynote:" URI handler has been removed. This issue does not affect Keynote versions prior to Keynote 2. Credit to David Remahl (www.remahl.se/david) for reporting this issue.

We updated our copies of Pages and Keynote 2 with no problems. We weren't having any problems with the previous versions during our use and none have cropped up since updating. [Biill Fox]



Saw something? Send a tip or a correction

The archive ran on reader tips. What did you see, where, and do you want the credit? Something wrong on this page? Say so and it gets fixed.

Read by the editor. You get a copy by email. Never published without your say.

More in Events · This month in the archive