Apple Releasing a Windows Browser

[asmithz]

Safari 3.0.1 Public Beta for Windows is now available and addresses
the following issues in Safari 3 Public Beta:

CVE-ID: CVE-2007-3186
Available for: Windows XP or Vista
Impact: Visiting a malicious website may lead to arbitrary code
execution
Description: A command injection vulnerability exists in the Windows
version of Safari 3 Public Beta. By enticing a user to visit a
maliciously crafted web page, an attacker can trigger the issue which
may lead to arbitrary code execution. This update addresses the
issue by performing additional processing and validation of URLs.
This does not pose a security issue on Mac OS X systems, but could
lead to an unexpected termination of the Safari browser.

CVE-ID: CVE-2007-3185
Available for: Windows XP or Vista
Impact: Visiting a malicious website may lead to an unexpected
application termination or arbitrary code execution
Description: An out-of-bounds memory read issue in Safari 3 Public
Beta for Windows may lead to an unexpected application termination or
arbitrary code execution when visiting a malicious website. This
issue does not affect Mac OS X systems.

CVE-ID: CVE-2007-2391
Available for: Windows XP or Vista
Impact: Visiting a malicious website may allow cross-site scripting
Description: A race condition in Safari 3 Public Beta for Windows
may allow cross site scripting. Visiting a maliciously crafted web
page may allow access to JavaScript objects or the execution of
arbitrary JavaScript in the context of another web page. This issue
does not affect Mac OS X systems.

Source.... Mac mailing list?

[Hairbautt]

@asmithz: Are you asking me or are you telling me?

[asmithz]

@asmithz: Are you asking me or are you telling me?

No lol, where I got the info said it was from MAC email. I am unsure about that, but here is news about the update with a artical.




Updated Safari for Windows improves security
http://www.macworld.com/news/2007/06...fari/index.php

[Skiz]

Should be renamed to iBrowse.

[milele]

Crashed after 30 sec.
am no longer interested in it..

[Hairbautt]

Mine never crashed Used it for a day then got bored tho'

[peat moss]

I see they have a patch out , I could n't find it to D/L seperately tho .

Guess you have to reinstall ?
http://www.apple.com/safari/download/

[Hairbautt]

Seems like it:

Download Updates

Changes in Safari 3.0.1 for Windows beta:

• Latest security updates (Familiar?)

Coming Soon (Can't wait...)

• Support for International users
• International text input methods
• Advanced text (contextual forms, international scripts)
• Localized menus and help
• NTLM support
• PAC file auto-detection
• FTP directory listings
• Link to proxy settings from Safari (Safari respects the proxy settings in the Windows Internet control panel)
• Cookie management
• LiveConnect support
• Tooltips
• Spell checking
• Printing page numbers, titles, margins

[peat moss]

Well in fairness that was a quick patch but why rename a " beta " ?
Here's a link to a topic about the patch :

http://www.vnunet.com/vnunet/news/21...afari-security

I'll say one thing , till it has a Spellchecker I'm giving it a pass . I post in blogs and forums and nothing worse than looking like an inbred .


@asmithz, sorry I just read your post again and see you posted about the patch . OoPS .

Guy's you have to install the patch manually , after downloading it has to be run from the start, program menu . Watch out for the Itunes and Quicktime shit tho .