You are here: silicon.com > Software > Applications

Apple patches more Safari holes

Windows browser made better..

By Ryan Naraine

Published: 25 June 2007 08:52 BST

Apple has refreshed its new Safari for Windows browser to patch a pair of vulnerabilities that could cause spoofing and HTTP redirection attacks.

This is the second batch of updates shipped for the beta browser since Apple's heavily hyped release of its flagship browser to the Windows ecosystem.

Both vulnerabilities affect Windows XP and Windows Vista users while one patch is available for Safari on the Mac OS X.

Details on the latest patches:

CVE-2007-2398 - In Safari Beta 3.0.1 for Windows, a timing issue allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered.

CVE-2007-2400 –Safari’s security model prevents JavaScript in remote web pages from modifying pages outside of their domain. A race condition in page updating combined with HTTP redirection may allow JavaScript from one page to modify a redirected page. This could allow cookies and pages to be read or arbitrarily modified. This issue affects Mac OS X users.

Ryan Naraine writes for ZDNet.com

Add comment

Print story with

Email story

Apple OS X more vulnerable than Vista?

Apple's Tiger and Leopard get patched up

Minority Report: Steve Jobs fails to wow

Five reasons to love (and hate) Windows Vista

Apple plugs 20 OS X holes

In silicon.com

Commentary

Peter Cochrane Peter Cochrane's Blog: Is convergence a fiction? Or could it finally be happening…

Clive Longbottom Quocirca's Straight Talking: A game of two halves Microsoft Virtualisation scores while its SOA bores...

Latest News

Skype touts biz credentials

BT gets chatty with business customers

Oracle takes on SAP with retail apps

Forecasting tech blows away stormy weather

Open source guru criticises Oyster software

Suppliers move away from licensing crackdowns

Jobs

SYSTEMS ADMINISTRATOR - APPLE MAC & OS X DESKTOP SUPPORT - Cambridge, South East

SYSTEMS ADMINISTRATOR - APPLE MAC & OS X DESKTOP SUPPORT - Cambridge, South East The European Bioinformatics Institute (EBI) is a non-profit academic ...

Systems Support Analyst

Novell NetWare, Linux, and Apple Mac OS - Experience of remote computer systems management Desirable Requirements Include: - Knowledge of Novell ...

IT Support Engineer

You will have a sound understanding of PC applications, preferably with a degree or HND in Computer Science or equivalent; a good working knowledge ...

Special Report Focus

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.