Windows Safari Fixed Again



Windows Safari Fixed Again

Less than two weeks after its launch ,Windows Safari browser has been fixed again.
The four security fixes are part of a larger Safari 3.0.2 beta release for Mac OS X and Windows. Both packs contain stability fixes in addition to the security update.

Only one of the four vulnerabilities for the Windows version could allow for remote code execution. The flaw lies in the WebKit component used by Safari.
By sending an user to a specially crafted webpage can cause an application crash and give the attacker the ability to install malware on the victim's computer.
Two of the vulnerabilities could leave users open to cross-site scripting attacks, while the remaining flaw gave attackers the ability to spoof legitimate websites.safari

Vulnerability number 3 allows attackers to conduct cross-site scripting attacks by using specially-crafted JavaScript code to redirect the user, while another allows cross-site scripting via a malformed HTTP request coded into a web page.

And the last vulnerability allows an attacker arbitrarily to edit the information that appears in the URL bar. An attacker could exploit the vulnerability to make a malicious site appear with the URL of a trusted one.

The updates also contain stability fixes for 16 performance and stability bugs in Windows and nine in OS X.

These icons link to social bookmarking sites where readers can share and discover new web pages.
  • TwitThis
  • Reddit
  • del.icio.us
  • StumbleUpon
  • Mixx

Comments

(required)

(will not be published/required)

(required)