Apple Issues

Apple issued Safari 3.1.2 for Windows which addresses Microsoft Security Advisory 953818 and is recommended for all Safari Windows users. However, it does not appear that is the end of the problem. It has been reported that when Safari is used on a system that also has Firefox 2 or 3, it could lead to providing an attacker the opportunity to steal arbitrary files from the file system. Fortunately, Firefox 3 has some protections that somewhat mitigate the issue.

For a complete roundup, see Nathan McFeters, Researcher keeps ‘carpet bomb’ attack alive, despite patch and the original report by Billy Rios at BK on Safari, hunting Firefox….


References:

• BK on Safari, hunting Firefox…
• Microsoft Security Advisory 953818
• Microsoft Security Advisory 953818 Combined Attack With Apple’s Safari on Windows Platform
• MSRC Blog, Security Advisory 953818
• Researcher keeps ‘carpet bomb’ attack alive, despite patch
• Safari 3.1.2 for Windows released to address vulnerabilities

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...