Brief Hands-On Report--Apple released AirPort Extreme Update 2007-002 for Intel Macs
This update is recommended for all Intel-based Macintosh computers and improves compatibility with AirPort Extreme base stations and networks.
This update includes the content from the AirPort Extreme Update 2007-001, and addresses a security issue.
This update also improves compatibility for the MacBook Core 2 Duo and the MacBook Pro Core 2 Duo when using certain third-party access points configured to use WEP Open System security.
Here are the details of the security fix:
Attackers on the wireless network may cause system crashes--An out-of-bounds memory read may occur while handling wireless frames. An attacker in local proximity may be able to trigger a system crash by sending a maliciously-crafted frame to an affected system. This issue affects the Core Duo version of Mac mini, MacBook, and MacBook Pro computers equipped with wireless. Other systems, including the Core 2 Duo versions are not affected. This update addresses the issue by performing additional validation of wireless frames. Credit to LMH for reporting this issue.
Apple tries to explain further:
The security fix described above (CVE-2006-6292) was originally released in AirPort Extreme Update 2007-001. The identical fix is also present in AirPort Extreme Update 2007-002, which contains an additional non-security fix for a compatibility issue when using certain third-party access points configured to use WEP. Systems which installed AirPort Extreme Update 2007-001 are correctly patched for CVE-2006-6292. Installing AirPort Extreme Update 2007-002 is recommended to obtain the additional compatibility fix. Affected systems that have not yet applied AirPort Extreme Update 2007-001 should apply AirPort Extreme Update 2007-002.
We recommend that every Intel-based Mac user download and install the update to ensure that their Mac has both the security fix and the WEP compatibility fix.
We downloaded the update via Software update and installed it on a Mac mini Core Duo, iMac Core Duo, iMac Core 2 Duo and MacBook Pro Core 2 Duo with no problems. Our AirPort reception for each measured the same before and after the update using the menu icon, Internet Connect and iStumbler 98. We use Apple's AirPort Extreme and Express Base Stations with WPA/WPA2 security so we could not check the WEP fix. [Bill Fox & Dana Baggett]
Saw something? Send a tip
The archive ran on reader tips. What did you see, where, and do you want the credit?