Members
Stats
  • Total Posts: 29745
  • Total Topics: 8744
  • Online Today: 1593
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)












Author Topic: Highly critical Safari exploit published  (Read 1481 times)

0 Members and 1 Guest are viewing this topic.

Samker

  • SCF Administrator
  • *****
  • Posts: 7316
  • KARMA: 305
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Highly critical Safari exploit published
« on: 10. May 2010., 23:14:08 »


Secunia last week published a new vulnerability affecting Apple’s desktop Safari browser: http://secunia.com/advisories/39670/
The new exploit can be used by malicious users to execute arbitrary code on the system and is deemed to be “highly critical”.

The security research company found the exploit to grant system level access when a user "visits a specially crafted web page and closes opened pop-up windows”. Affected versions include Safari 4.0.5 for Windows, though other versions and operating systems might also be affected.

The vulnerability is caused due to an error in the handling of parent windows and can result in a function call using an invalid pointer. This can be exploited to execute arbitrary code when a user e.g. visits a specially crafted web page and closes opened pop-up windows.

Secunia credits Krystian Kloskowski with the discovery and advises users to refrain from visiting untrusted web sites or links until Apple provides an update.


Apple’s Safari internet browser is available for both Mac and PC. Safari 4 added many new features including Top Sites, Cover Flow, Full History Search, a new javascript ‘Nitro’ engine, new developer tools, and a brand new interface for Windows users.

(NW)

Samker's Computer Forum - SCforum.info

Highly critical Safari exploit published
« on: 10. May 2010., 23:14:08 »




 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising