Categories: MacSecurityWorkspace

Apple Patches Dozens Of Safari Security Flaws

Apple has patched 58 security flaws in its Safari web-browser and the open source WebKit browser engine this week.

The flaws affect Windows 7, Vista, XP SP2 or later and Mac OS platforms and it is recommended all users update to Safari 5.1.

The vulnerabilities could allow invaders to execute arbitrary code, perform cross-site scripting attacks or disclose sensitive information, the US Computer EmergencyRreadiness Team (CERT) said on its site.

The flaws also involve buffer and integer overflows and multiple memory corruption issues, according to Apple.

Potentially devastating arbitrary code attacks could be executed just by visiting maliciously crafted websites or TIFF downloads.

A busy week for Apple

As well as responding to the holes in Safari. Apple has also introduced several new security features including a ‘Privacy Pane’ setting which allows for managing and deleting cookies, sandboxing of web content and apps and private autofill of web forums.

The update comes hot on the heels of Apple’s latest Mac OS, codenamed Lion, and record-breaking financials for the last quarter. The Safari 5.1 update is included in Lion.

The perception of Mac OS X’s relative immunity to malware has been exposed as a fallacy in recent months as fake AV and malware has surfaced to take advantage of Apple products’ growing popularity.

David Jamieson

View Comments

  • I just updated to Snow Leopard 10.6.8 and Safari 10.5 on 7/22/2011.

    Unfortunately, Safari now seems utterly transparent to any website setting cookies, even if the Block "Always" setting is chosen. After "Removing All Website Data" and seeing none, on the next opening Safari and any website,morecookies are set.

    After two calls to Apple support, the explanation was just that is how Safari operates. Very frustrating and disappointing.I am now a confirmed Firefox user.

Recent Posts

Craig Wright Sentenced For Contempt Of Court

Suspended prison sentence for Craig Wright for “flagrant breach” of court order, after his false…

2 days ago

El Salvador To Sell Or Discontinue Bitcoin Wallet, After IMF Deal

Cash-strapped south American country agrees to sell or discontinue its national Bitcoin wallet after signing…

2 days ago

UK’s ICO Labels Google ‘Irresponsible’ For Tracking Change

Google's change will allow advertisers to track customers' digital “fingerprints”, but UK data protection watchdog…

2 days ago

EU Publishes iOS Interoperability Plans

European Commission publishes preliminary instructions to Apple on how to open up iOS to rivals,…

3 days ago

Momeni Convicted In Bob Lee Murder

San Francisco jury finds Nima Momeni guilty of second-degree murder of Cash App founder Bob…

3 days ago