Categories: MacSoftwareWorkspace

Windows PCs Exposed By Safari Browser Bug

A security researcher has uncovered a critical bug affecting Apple Safari that could be exploited to run malicious code on Windows computers.

The discovery of the flaw is credited to researcher Krystian Kloskowski. According to an advisory from Danish security firm Secunia, the vulnerability is due to an error in the handling of parent Windows and can result in a function call using an invalid pointer.

“This can be exploited to execute arbitrary code when a user e.g. visits a specially crafted web page and closes opened pop-up windows,” Secunia wrote in its advisory. “The vulnerability is confirmed in Safari version 4.0.5 for Windows. Other versions may also be affected.”

Avoid unsolicited Links

US-CERT warned that exploit code for the vulnerability is publicly available, and warned that by convincing a victim to view an HTML document such as a Web page or e-mail attachment in Apple Safari, an attacker could run arbitrary code with the privileges of the user. Users should avoid unsolicited links in e-mails, instant messages, web forums or Internet relay chat channels, according to US-CERT.

Anyone concerned about the vulnerability can disable JavaScript in Safari until a fix is available, though many Web sites require JavaScript to operate properly.

Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved

Share
Published by
Brian Prince eWEEK USA 2014. Ziff Davis Enterprise Inc. All Rights Reserved
Tags: Safari

Recent Posts

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

1 day ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

1 day ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago