Apple releases Security Update to fix URL protocol/Help Viewer vulnerability

Apple has released Security Update 2004-05-24 for both OS X 10.3.3 and OS X 10.2.8. The version for 10.3.3 updates the Help Viewer application, whereas the version for 10.2.8 updates both the Help Viewer and Terminal applications.

Although Apple has at this point released very few details about exactly what the Update does, we're assuming that it fixes the vulnerability, discussed at length over the past week on MacFixIt, where the help (and possibly disk) URL protocol could be used to run malicious commands, scripts, or applications without the user's permission or knowledge.

Resources