Apple closes a raft of "drive-by download" holes in OS X and iOS

This comes from Sophos' Naked Security:

Apple closes a raft of “drive-by download” holes in OS X and iOS | Naked Security

Quote:

And to all those Apple fans who live by the rule, "If malware hits your Mac, you'll always see a prompt or some kind of warning first..." ...the whole problem with an RCE attack caused by booby-trapped content is that just looking at a file, or opening a file that contains embedded data such as a font or an image, is usually enough to give control to the crooks. It's called a drive-by install or a drive-by download for obvious reasons: you think you are safely "Just Visiting," as the Monopoly board puts it, but the crooks end up owning you!

Apple closes a raft of "drive-by download" holes in OS X and iOS