also @ TechSpot: Rumor: AMD "Piledriver" FX CPU production to begin Q3 2012

Apple updates Safari for Windows to address flaws

By

On June 14, 2007, 12:34 PM EST

No less than two days after Apple release Safari for Windows, many independent security researchers had discovered numerous flaws in the browser, which ranged from denial of service to potential compromise. Apple is moving fast to compensate for these flaws, with the release of a beta version that fixes several problems.

The 3.0.1 update for Safari on Windows will fix three different issues:

The updated version patches CVE-2007-3186, a command-injection vulnerability that may lead to arbitrary code execution; CVE-2007-3185, an out-of-bounds memory read issue that may lead to an unexpected application termination or arbitrary code execution; and CVE-2007-2391, a race condition that may allow cross-site scripting.
At first, it was speculated that perhaps the flaws could also be exploited under OS X. According to them, however, it affects only Safari running on Windows. You can of course now download the update if you so wish. To compete with Firefox and IE in the Windows realm, they'll definitely need to maintain this type of vigilance. So far, most have been unimpressed by Apple's move.

Related Stories

No tags on this story

Post a new comment

Guest user

To post as an anonymous
user click here
.

Members

If you are a TechSpot member,
please login first.


By signing up you gain complete access to the TechSpot community. Join thousands of computer and technology enthusiasts that contribute and share knowledge in our forum. Post messages, get a private inbox, upload your own photo gallery and more.

Subscribe to TechSpot

Get free exclusive content, learn about new features and tech breaking news.