Latest Comments
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
by Werner K | Nov 26, 2008 8:36 PM
 
"That will enhance Microsoft Office system, including SharePoint - good platform for enterprise ..."
by SGE | Nov 25, 2008 3:29 PM
 
"how many users allow per session? because the digital persona password manager allows only 10 ..."
by Daniel | Nov 25, 2008 12:14 AM
 
"security through obscurity...shows how detached HIPAA is from reality."
by priceOfFishInChina | Nov 20, 2008 1:19 PM
 
"I have been the recipient of Agent.JEN.Trojan through an email suggesting a UPS parcel (including..."
by Vincent Laing | Nov 13, 2008 4:01 PM
Web

Safari on Windows ventures into first security flaw

  • Email a Friend
  • Print Page
Safari on Windows ventures into first security flaw
By Tom Sanders
Jun 12, 2007 11:37 AM
Tags: Safari | on | Windows | ventures | into | first | security | flaw
Security researcher Aviv Raff claims to have found a first security vulnerability in Apple's Safari browser on Windows only hours after the software was released.

Raff tested the application against a standard browser security testing tool.

"A first glance at the debugger showed me that this memory corruption might be exploitable. Although, I'll have to dig more to be sure of that," he wrote on his blog.

Apple on Monday unveiled a beta of a Windows version of its Safari web browser. The final product is scheduled for release in October.

In a keynote presentation at Apple's World Wide Developer Conference in San Francisco, chief executive Steve Jobs touted that the browser would up to twice as fast as Microsoft's Internet Explorer, but didn't mention Internet Explorer's security record.

Apple lists the browser's security as one of twelve reasons as to "Why you'll love Safari" and adds that "Apple engineers designed Safari to be secure from day one."

Raff earlier this year worked on the "Month of Apple bugs", during which researchers published details on a slew of vulnerabilities in the Apple software. It was intended to challenge Apple's security record. He took the company's boasting about Safari's security as a personal challenge.

"So, I've decided to take it for a test drive and ran Hamachi. I wasn't surprised to get a nice crash few minutes later...," he wrote. Hamachi is a tool that tests a browser's integrity.

"Don't you hate those pathetic claims?" he flamed in the closing of his post in reference to Apple's marketing speak.

Apple didn't immediately respond to a request for comment.

Copyright © 2008 vnunet.com

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Vulnerabilities & Exploits Whitepapers