The Apple computer, known for its reputation of having pretty much zero security flaws, has been hit with a vulnerability discovered in their wireless software. More on this vulnerability below.

Kicking off a “month of kernel bugs,” a security researcher has released attack code that he claims exploits a new security hole in wireless software from Apple Computer.

The vulnerability lies in the Apple AirPort driver, according to details on the flaw published by H.D. Moore, the developer of the Metasploit security tool. It affects only the AirPort driver provided with wireless cards shipped between 1999 and 2003 with PowerBooks and iMacs, the posting said.

To launch an attempt, the hacker would have to be on the same wireless network as a vulnerable Mac. The attack entails trying to trigger a memory corruption flaw by sending a malformed data packet to the computer, according to Moore’s advisory. But the process isn’t easy, and Moore hasn’t yet been able to gain complete control over a vulnerable Mac, he wrote in an e-mail to CNET News.com.

“The vulnerability itself only affects older hardware and is going to be difficult to turn into a remote code execution exploit, but it’s definitely possible, just a matter of time and motivation,” Moore said. “The current proof-of-concept triggers a fatal kernel panic and forces the user to power cycle their machine.”[more]

It seems like more and more people are finding vulnerabilities in Macintosh computers and components. When will the next one come out? Who knows. But what we do know is that Mac’s reputation of their “secure” computers is starting to fall apart. Perhaps a new marketing campaign?

Tags: Malware