Apple has delivered an update to its Safari web browser.
Version 4.0.4 addresses seven vulnerabilities, including three in the WebKit, an engine that allows web browsers to render on web pages.
One of those WebKit flaws could be exploited if an attacker is able to access a maliciously-crafted FTP server to cause arbitrary code execution. Meanwhile, another WebKit vulnerability can result in cross-site request forgery if a user visits a maliciously-crafted web site.
The Safari update, which follows a major Mac OS X patch batch released earlier this week, also fixes a vulnerability in ColorSync, a graphics utility, that could permit code injection if a user views a malicious image with an embedded color profile.
The browser upgrade affects both Windows and Mac users. This is the sixth time Safari has been updated this year.
See original article on scmagazineus.com
Apple releases Safari update to close seven holes
By
Dan Kaplan
on
Nov 13, 2009 11:27AM
Sixth update of the year.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
The Great Resignation has intensified insider security threats
Promoted Content
Why Genworth Australia embraced low-code software development
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
How to turn digital complexity into competitive advantage
Sponsored Whitepapers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
.jpg&h=146&w=240&c=1&s=0)
