SecurityRatty: Safari Users at Risk But Only in Windows

This is cache of http://feeds.feedburner.com/~r/itsecurity/~3/309846262/. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Safari Users at Risk But Only in Windows

2008-06-11 11:39:15 by Editor in IT Security - The IT Security Industry's Web Resource

I love the Safari browser, so it caught my attention to read about a new exploit on the loose. However, I had to laugh, when I learned that Safari is only at risk in the Windows environment. Apple said they have no plans to patch it, but Microsoft released an advisory:

The Safari bug, originally disclosed on May 15 by security researcher Nitesh Dhanjani, allows attackers to litter a victim’s desktop with executable files, an attack known as “carpet bombing.”

Two weeks later, security researcher Aviv Raff said that if this flaw is exploited in combination with bugs in Windows and Internet Explorer, attackers can run unauthorized software on a victim’s computer.

Windows XP and Vista users might want to rely on Firefox for a while, and read here for the full advisory.