Petteri Kamppuri

**Name of the Vulnerable Software and Affected Versions** International Components for Unicode in Apple Mac OS X version 10.5.8 **Description** The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via unspecified vectors in the UCCompareTextDefault API. **Recommendations** For International Components for Unicode in Apple Mac OS X version 10.5.8, consider disabling the UCCompareTextDefault API as a temporary workaround until a patch is available.

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.3.9 through 10.4.10 Description: The issue allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack due to improper validation of certificates by CFNetwork. Recommendations: For Apple Mac OS X versions 10.3.9 through 10.4.10, update to a version that properly validates certificates to prevent man-in-the-middle attacks.