facebook rss twitter

Apple software has the most vulnerabilities, says report

by Pete Mason on 26 July 2010, 15:17

Tags: Apple (NASDAQ:AAPL)

Quick Link: HEXUS.net/qazcl

Add to My Vault: x

One of the major selling points of Apple platforms is that they are safer, more stable and more secure than competing software. However, the latest report from security firm Secunia suggests that the iPod-maker's software had more vulnerabilities discovered this year than programs from any other company.

Though Apple is at the top of the heap, having wrestled the position away from Oracle this year, the picture isn't much better for the rest of the list.  The top-10 companies made up 38 per cent of the announced vulnerabilities and included Microsoft, HP, Adobe and Cisco. Google and Mozilla also squeezed onto the list in the ninth and tenth spots, respectively.

Mo' Market Share, Mo' Problems

Of course, this isn't entirely surprising when you consider, as the report does, the market-share of the affected software. While Apple's OSX isn't particularly prevalent, programs like iTunes, QuickTime and Safari are very common, even on Windows machines. Popular software is more likely to be the focus of hackers looking for exploits, and so an increased number of vulnerabilities are likely to be found.

Raw statistics like these do fail to tell half of the story, though. The report goes on to point out that the numbers don't indicate how quickly or effectively the flaws were fixed or whether they were even exploited.

However, the main take-home message from the report is that malicious attacks are increasingly being aimed at non-Microsoft products. While holes in Windows, Internet Explorer and Office were being found at approximately the same rate, year-on-year, the discovery of flaws in common third-party software is growing rapidly. The firm partly blames this on programs relying on users to apply patches and updates.

The full report is available from Secunia's website.  For those who want to skip the reading, your time might be better spent making sure all of your software is up-to-date.



HEXUS Forums :: 7 Comments

Login with Forum Account

Don't have an account? Register today!
Who cares, whilst Apple have like 1% of the market share its irrelevant.
TheAnimus
Who cares, whilst Apple have like 1% of the market share its irrelevant.

Which market share? Remember this is software in general, not restricted to that running on Apple hardware/OS for example. Apple's market share of pmp software is almost certainly greater than 1%, and can probably be found on greater than 1% of computers.
Any bets on apple calling a press conference on Friday and then owning up to the issues and then going on to say that other peoples software has vulnerabilities too complete with video footage?
I e-mailed Steve Jobs and he replied saying:

“Non-issue. Just avoid using your computer in that way.”
kalniel
Which market share? Remember this is software in general, not restricted to that running on Apple hardware/OS for example. Apple's market share of pmp software is almost certainly greater than 1%, and can probably be found on greater than 1% of computers.
I guess, and given how safari just completely ignores certain ideas (such as zone flagging of PEs). But these are still user mode apps thou? UAC would catch most surely? ASLR whilst not invulnerable might hinder attempts too.

but if your running OSX, with its plethora of return to libc, your probably stuffed, however know one uses that OS anyway, so your probably safe.