Apple Plugs Windows Safari Security Holes

By the Betanews Staff | Published June 14, 2007, 2:19 PM

Just days after its beta release of Safari 3 for Windows became a zero-day nightmare with a number of exploitable vulnerabilities, Apple has rushed out version 3.01 to fix three security flaws. The problems only affect Windows, not the Mac OS X release.

The 3.01 update patches a bug that could lead to Safari running arbitrary commands via CMD.EXE, a denial of service crash due to memory corruption, and a flaw that could lead to a cross-site scripting attack. Windows XP and Vista users can download Safari 3.01 from FileForum.

Comments

View comments by with a score of at least

hmm, patched in 3 days...I'm impressed.

Score: 0

|

How about the intermittent crash when you change to a "multi-firewalled" proxy?

I experience this a lot. Especially a proxy that requires user authentication. I hope Safari developers will look into this.

Score: 0

|

Wow, I had no idea that Betanews had so many damn ads until I visited in Safari.

Back to Firefox for me until they make an add-on that blocks ads.

I'm typing this in Safari right now and I count 4 ads on the page. With Firefox I see ZERO ads.

Score: 0

|

What business do you have reading and obviously ad supported website and striping out the ads. If you are going to have that little class you might want to keep it to yourself. Or maybe you can offer to pay the website for the content some other way. These people have to work for a living to feed their families just like everyone else, but you want them to provide you with information for free. What do you do for a living? maybe you should give me something for free. Why don't you come mow my lawn or clean my toilets. Freeloading jackass. Was that a personal attack or a factual criticism? I’ll leave it up to the moderator to decide.

Score: 0

|

lol.... well spoken.

Score: 0

|

The only personal attack is coming from you.

As for people browsing this website with ad-blocking technology, if you think most people who read this site don't have that enabled, you're delusional. Don't bash people for being honest.

Score: 0

|

Good job on patching the 3 holes, but they have more work to do. They may have taken a big perception hit too.

Score: 0

|

Nah, only geeks are paying attention at this stage. :-)

Score: 0

|

I see they've still not fixed the rather nasty font bug yet.

Score: 0

|

Just replace the Lucida fonts in your program files folder with the ones from your system fonts folder and you'll be good.

Score: 0

|

That was quick! Good job Apple!

Score: 0

|

I'm sure there's going to be all sorts of interesting posts on this topic, but nevertheless, it's good to see Apple patch these flaws so quickly. Isn't that what beta testing is all about? Yes I know they shot their mouths off about how secure Safari is, but hey it's their first attempt at a browser for Windows.

Score: 0

|

"The problems only affect Windows, not the Mac OS X release."

Gee, I would have never guessed. LATN!

Score: 0

|

really... cause thats not what i heard.

"These bugs have been verified in the current PRODUCTION copy on OSX."
http://erratasec.blogspo...07/06/niiiice.html";

Score: 0

|

One wonders why that URL no longer exists!

Score: 0

|

its there, just an extra accidental quote at the end:
http://erratasec.blogspot.com/2007/06/niiiice.html

Score: 0

|

Yeah, the thread exists, but it stopped the other evening at 6 pm.

Maynor claims the bugs affect the OS X version too, then blames the lack of security in OS X.

But if the bugs are in the Windows version too, then how could they have anything to do with OS X? Great logic.

Personally I don't believe him. The MOAB didn't uncover any such easily found Safari bugs.

Score: 0

|

Just watch your posts my friend. Last time I got blasted with personal attacks by the Apple followers when I showed them that link (as if I wrote it), when the story was first announced. You have been warned :) I have a feeling the same thing will happen now. This is the only reason I will never use Mac OS X or recommend it to anyone - Arrogant community

Score: 0

|

hey IT'S A FUKING BETA VERSION!!! g**d*** PEOPLE

Score: 0

|

Kudos to Apple for reacting promptly. I only hope they don't take another dig at PC using this incident (like they always do).

Score: 0

|

They probebly will...

Score: 0

|

Yea, doesn't the John Hodgeman character get to say "How 'bout that total sukfest called Safari, there, mr. apple giblets?"

Hahahahahaha

Score: 0

|

PDC 2009: What have we learned this week?

There was the freebie that no one will forget, the heebie-jeebies courtesy of Scott Guthrie, and a teensy bit clearer picture of how this cloud thingie should work.

Live report: Will Google Chrome OS change Linux?

The mysteries of just what Chrome OS is, and how much of an operating system it truly is, may be resolved today.

PDC 2009: Microsoft cares about Web browser performance

The effort to give users of the world's dominant Web browser the impression of quality, is a personal one for the man who leads that battle.

Nokia re-affirms its commitment to Symbian, sort of

Maemo won't necessarily be replacing Symbian in the Nokia N-Series, but that's definitely a place where it will be found.

E-book readers will be in short supply this holiday season

E-readers are hot this year, and a lot of compelling new products have been released, but are there enough electrophoretic displays to go around?

Sony looks to finally open a single storefront for downloads

Sony has had many different download portals for movies, music, e-books, and games, and now it's looking to make a single shop for all of it.

Tuning out the tablet: Time to give the endless speculation a rest

Wide Angle Zoom: Wishing and hoping and thinking and praying....won't put an iTablet on the market.

Five improvements for IT managers in 2010

If businesses are to improve their efficiency for next year, they need to stop and reassess the basic tenets of their job.

AOL's spinoff from Time Warner to shed 2,500 jobs

As AOL moves toward become an independent company again, it will cut nearly a third of its workforce.

Gartner: SMS-based money transfer will be bigger than mobile browsing, search

Gartner issues its predictions for the 10 things our phones will be doing in 2012.

Don't forget to upgrade to Firefox 3.6 beta 3 today

Mozilla has released the latest beta its Firefox 3.6 browser software, just over one week after beta 2.