Friday, January 30, 2015
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
HDDs Shipments Increased In 2014
FCC To Fine AT&T For Unathorized Operation Of Wireless Stations
Google Reports Increased Profit
Facebook Introduces Place Tips in News Feed
AMD Cuts Prices Of Radeon Graphics Card To Cash On GTX 970 Memory Furor
HyperX Sets DDR4 Overclocking Record
Intel 5th Generation vPro Processors Released
Mobile Provider TracFone to Pay $40 Million to Settle FTC Charges
Active Discussions
Writing Audio files on DVDs ?
Need major help with Gigabeat
New match-3 puzzle game launch now!
Rimage 2000i
Sound card for my Laptop
hello
full screen wide screen
Hi
 Home > News > General Computing > Researc...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, May 11, 2010
Researchers Reveal Important Safari Vulnerability


Danish vulnerability tracker Secunia found a vulnerability and a security issue in Apple's Safari browser.

According to Secunia, the security issue can lead to exposure of sensitive information and the vulnerability can be exploited by malicious people to compromise a user's system.

An error in the handling of parent windows can result in a function call using an invalid pointer. This can be exploited to execute arbitrary code when a user e.g. visits a specially crafted web page and closes opened pop-up windows, Secunia announced.

The security issue is caused due to Safari including HTTP basic authentication credentials in an HTTP request if a web page that requires HTTP basic authentication redirects to a different domain (e.g. via a "Location" header).

The vulnerability and the security issue are confirmed in Safari version 4.0.5 for Windows.

The company recommends users not to visit untrusted web sites or follow links from untrusted sources. In addition, users should not authenticate to sites that use HTTP basic authentication and use redirections to different domains.

US-CERT also confirmed the vulnerability affecting Apple Safari.

"By convincing a user to open a specially crafted web page, an attacker may be able to execute arbitrary code. Exploit code for this vulnerability is publicly available," US-CERT said.

US-CERT encourages users and administrators to disable JavaScript until a fix is provided by Apple.




Previous
Next
Sharp Develops 3D Camera Module for Mobile Devices Capable of Capturing HD 3D Video        All News        Report: $51 Billion Lost to Software Piracy in 2009
US Patent Office Affirms i4i Patent - Rejects Microsoft Challenge     General Computing News      Report: $51 Billion Lost to Software Piracy in 2009

Get RSS feed Easy Print E-Mail this Message

Related News
Apple Sells Record iPhones in Holiday Quarter, iWatch Coming in April
Apple Takes Top Spot in China's Smartphone Market
Samsung and Apple Together Consumed 17 Percent of Total Semiconductor Demand in 2014
Samsung Led The Smartphone Market in 2014, TrendForce Reports
Apple May Use Its Own Chips In Future Macs
Apple, Ericsson In Courts Over LTE Patents
Apple, Google To End Lawsuit Over Poaching
Apple May Take On GoPro With Action Cameras
Quanta Accelerates Production Of New 12-inch MacBook Air
Apple Patent Describes Flexible iPhone Concept
Apple Starts Selling Unlocked iPhone 6 and 6 Plus
Apple Sued Over Limited Storage Space

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2015 - All rights reserved -
Privacy policy - Contact Us .