Posted Tuesday 1st July 2008 12:27 GMT
Scarlet Pimpernels
"Six of the vulnerabilities affect the Ruby programming language. Apple said: "Multiple memory corruption issues exist in Ruby's handling of strings and arrays, the most serious of which may lead to arbitrary code execution."
The company said the update fixes the bug “by performing additional validation of strings and arrays"."
Ye Olde XSS Zero Day Vulnerability ...... Hit and Run Operations which may lead to arbitrary code execution ..... or more worryingly, embed sleeper codes?