also @ TechSpot: Congress pressures Google on Glass privacy concerns

› ›

Secunia uncovers Safari Web browser exploit

By Derek Sooman

On February 21, 2006, 1:49 PM

Secunia has documented a possible exploit in Apple’s Safari Web browser. The company has rated the exploit as extremely critical. Known as "Mac OS X “__MACOSX” ZIP Archive Shell Script Execution", the exploit stems from a preference setting in the Safari Web browser which can lead to the execution of a malicious shell script, renamed to a "safe" extension in a ZIP archive.

That preference allows the Mac to automatically open “safe” files after downloading them. So-called safe files include movies, pictures, sounds, PDF and text documents, disk images and other archives.

If a shell script is renamed to appear as a “safe” extension to Safari, systems that have this preference turned on can automatically execute the script — and this can be exploited by someone with malicious intentions, according to Secunia.

No tags on this story

1 comment

User Comments: 1

Got something to say? Post a comment
  1. February 21, 2006 3:16 PM
    DragonMaster said:
    Bad... We find more bugs from Apple software!
    Reply

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Most Popular

Trending Featured
More Trending Topics

Featured on Smartphones

Downloads and Drivers

Downloads   Drivers  

J. River Media Center 18.0.187

ComicRack 0.9.169

Ashampoo UnInstaller 5.03

Files Terminator Free 2.5.0.11

Advanced Host Monitor 9.50

More Downloads

Latest Discussion

Have DOTA 2 keys to give (steam requiered) 8 replies on Gaming

Best possible quality DVD ripping? 5 replies on Software Apps

Bios update help 10 replies on Processors and Motherboards

Windows update completely stopped working, unknown error 8024402C 6 replies on Windows OS

Bitdefender 5 replies on Software Apps

More Recent Discussion

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.