Apple plugs security holes in Safari on Mac, PC
Apple on Wednesday released an update to the Safari browser that plugs security holes on Macintosh and Windows machines.
Safari 3.1.1 fixes two Safari vulnerabilities that affect Windows XP or Vista and two WebKit vulnerabilities that affect Mac OS and Mac OS X Server versions 10.4.11 and 10.5.2, as well as Windows XP or Vista.
One of the two WebKit vulnerabilities could put computer users at risk of a cross-site scripting attack that can inject malicious code onto a victim's computer. The vulnerability was discovered during the PWN to OWN contest at CanSecWest last month by Dan Charlie Miller, Jake Honoroff, and Mark Daniel of Independent Security Evaluators.
The other WebKit vulnerability could lead to an unexpected application termination or arbitrary code execution. Apple credited Robert Swiecki of the Google Security Team and David Bloom for reporting this issue.
The remaining two vulnerabilities, which affect only Windows XP or Vista, could lead to an unexpected application termination or arbitrary code execution, or control the contents of the address bar and spoof the contents of a legitimate site.
The Windows version of Safari 3.1.1 can be downloaded from CNET's Download.com here and the Mac version here.
Apple has more information about Safari 3.1.1 here.
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor. 
I don't need an update for it, I don't have it installed.
I might what my Quick time to update, but that's all.
want to install (in your case just Safari). In the Tools menu, select
"Ignore Selected Updates". Magic ensues.
If you later decide you DO want one of the items you previously
chose to ignore, select "Restore Ignored Updates".
That wasn't too hard, was it?
I thinks its funny that everyone is up in arms about Apple doing it
now, since its been going on by MS for years.
Like I said, dont like it, dont install it. Its your only choice.
- What's this?
- by McPlot April 17, 2008 5:17 AM PDT
- What's this? Apple software isn't perfect and can have security holes? Wow, you would never know it with all the Apple Zealots out there saying you do not even need any security software!
- Like this Reply to this comment
-
-
- It is true!
- by Lee in San Diego April 17, 2008 5:33 AM PDT
- Unlike trolls, Apple isn't perfect.
- Like this
-
- The only Ant-anything my Macs have
- by Maclover1 April 17, 2008 5:36 AM PDT
- are OS X. Its Anti-Windows. I have never installed AV on my Macs.
- Like this
-
(13 Comments)I forget viruses exist until I use a PC.