Fergie's Tech Blog

Security Fix: Revisiting the Safari Vulnerability on Windows

Brian Krebs writes on Security Fix:

A little over a week ago, I wrote about a security advisory from Microsoft warning that Apple's Safari Web browser for Windows introduces new vulnerabilities. Specifically, Microsoft said it allows automatic downloading of files to the Windows desktop, files that in some cases could be run without the user's knowledge.

Over the weekend, I heard from a noted security researcher who has put together a proof-of-concept exploit for this vulnerability that suggests it is more of a design flaw in Windows rather than any problem with Safari.

posted by Fergie @ 6/08/2008 10:44:00 AM