Apple releases Safari update to close seven holes

By
Follow google news

Sixth update of the year.

Apple has delivered an update to its Safari web browser.

Version 4.0.4 addresses seven vulnerabilities, including three in the WebKit, an engine that allows web browsers to render on web pages.

One of those WebKit flaws could be exploited if an attacker is able to access a maliciously-crafted FTP server to cause arbitrary code execution. Meanwhile, another WebKit vulnerability can result in cross-site request forgery if a user visits a maliciously-crafted web site.

The Safari update, which follows a major Mac OS X patch batch released earlier this week, also fixes a vulnerability in ColorSync, a graphics utility, that could permit code injection if a user views a malicious image with an embedded color profile.

The browser upgrade affects both Windows and Mac users. This is the sixth time Safari has been updated this year.

See original article on scmagazineus.com


Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

National photo licence recognition system set to go live in 2025

National photo licence recognition system set to go live in 2025

Qantas says customer data released by cyber criminals

Qantas says customer data released by cyber criminals

Hackers using F5 devices to target US gov networks

Hackers using F5 devices to target US gov networks

NSW gov contractor uploaded Excel spreadsheet of flood victims' data to ChatGPT

NSW gov contractor uploaded Excel spreadsheet of flood victims' data to ChatGPT

Log In

  |  Forgot your password?