You are here: silicon.com > Software > Applications

Apple patches more Safari holes

Windows browser made better..

By Ryan Naraine

Published: 25 June 2007 08:52 GMT

Apple has refreshed its new Safari for Windows browser to patch a pair of vulnerabilities that could cause spoofing and HTTP redirection attacks.

This is the second batch of updates shipped for the beta browser since Apple's heavily hyped release of its flagship browser to the Windows ecosystem.

Both vulnerabilities affect Windows XP and Windows Vista users while one patch is available for Safari on the Mac OS X.

Details on the latest patches:

CVE-2007-2398 - In Safari Beta 3.0.1 for Windows, a timing issue allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered.

CVE-2007-2400 –Safari’s security model prevents JavaScript in remote web pages from modifying pages outside of their domain. A race condition in page updating combined with HTTP redirection may allow JavaScript from one page to modify a redirected page. This could allow cookies and pages to be read or arbitrarily modified. This issue affects Mac OS X users.

Ryan Naraine writes for ZDNet.com

Add comment

Print story with

Email story

Apple's Tiger and Leopard get patched up

iPhone gets first update

Minority Report: Steve Jobs fails to wow

Apple plugs 20 OS X holes

Microsoft warns of IE, Outlook flaws

In silicon.com

Commentary

Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead

Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy

Latest News

Telegraph CIO on the rocky road to going Google

Why the UK will never create a Google, Microsoft or Oracle

'Incompetent': Watchdog's verdict on prisoner database

Maemo and Android: Symbian's open source rivals up the pressure

Taxman to save £110m by taking an axe to its IT estate

Jobs

CSS Front End Web Developer - South Birmingham

In addition to the website work, the candidate will be responsible for other web design based activities such as producing HTML emails, promotional ...

Senior Test Analyst (Fitnesse OR TDD)

Web Browser familiarity (IE, FF, Chrome, Safari) - Working knowledge of HTML, XML, CSS - Ability to use tools to inspect browser using DOM, XPath, ...

WEB DESIGNER / WEB DEVELOPER /E-COMMERCE/WEBSITE DESIGNER /E-COMMERCE

Ideally some knowledge of Mac OSX. You must be able to communicate at all levels and liaise with many departments in order to strengthen this already ...

Special Report Focus

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.