Apple Security Update Server 2013-002

This Security Update is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update.

Make sure that you have the latest security updates and system improvements on your Mac.

What's New in This Release: [ read full changelog ]

CFNetwork:
· 
Available for: OS X Mountain Lion v10.8 to v10.8.3
· 
Impact: An attacker with access to a user's session may be able to log into previously accessed sites, even if Private Browsing was used
· 
Description: Permanent cookies were saved after quitting Safari, even when Private Browsing was enabled. This issue was addressed by improved handling of cookies.

CoreAnimation:
· 
Available for: OS X Mountain Lion v10.8 to v10.8.3
· 
Impact: Visiting a maliciously crafted site may lead to an unexpected application termination or arbitrary code execution
· 
Description: An unbounded stack allocation issue existed in the handling of text glyphs. This could be triggered by maliciously crafted URLs in Safari. The issue was addressed through improved bounds checking.

CoreMedia Playback:
· 
Available for: OS X Lion v10.7 to v10.7.5, OS X Lion Server v10.7 to v10.7.5, OS X Mountain Lion v10.8 to v10.8.3
· 
Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termina...