Safari 3.1.2: Apple’s answer to Microsoft
If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!
Apple book for a new Windows version 3.1.2 stamped its Safari Web browser and its share of work to prevent the exploitation of the loophole Carpet Bomb, which is real danger in association with an IE vulnerability.
For several weeks the controversy raged between Microsoft and Apple against the backdrop of a vulnerability in shared responsibility, although for most computer security experts, it is primarily the Internet Explorer browser that is to blame.
It all started in late May with the publication of a notice of security in which Microsoft has indicated conduct an inquiry about a vulnerability clearly attributed to Safari. In fact, the vulnerability of qualified Carpet Bomb as a result of having to wallpaper the user desktop Windows, or the directory ~ / Downloads / Mac OS X with unwanted files had actually been discovered in mid-May by a researcher named Nitesh Dhanjani. The latter had warned Microsoft that Apple as its discovery.
Real Menace in Windows
The real danger of this flaw, however, has been proved that under Windows environment with the publication of an exploit code and a Web page proof of concept by another researcher, Liu Die Yu
At the launch, Internet Explorer research DLL files in cases where files are stored Windows system but also on the desktop. By default, Safari downloads files on the same office and without prior warning to the user, this is the fault of Apple’s browser. For the rest, everything is a matter of vulnerability in IE6, 7 and 8 for the beta to be willing to consider a DLL file specially designed, and therefore placed on the desktop made by a download via Safari. Liu Die Yu has been demonstrated with a “schannel.dll” corrupt borne by IE, resulting in the automatic opening of the notebook which bodes well for other actions far more damaging.
Apple makes the job
With version 3.1.2 for Windows Safari, Apple has therefore adjusted the lax behaviour of its browser now repatriate default files in the folder “My Documents” on Windows XP, and “Downloads” in Windows Vista. By the way, Apple took the opportunity to correct other security problems. Still if IE …
Download Safari 3.2.1 for Windows