Safari for Windows recently got a much needed Windows XP and Vista version update that solved a vast array of issues plaguing Windows users. One of the biggest was a desktop attack vulnerability called a carpet bomb. This put users at risk got attack through Safari and the desktop.

The issue of attack stemmed form a flaw in how Windows handles .exe (executable) files. There is a reason Macs do not accept .exe files - they are an easy way to ship viruses, adware, spyware and other forms of malware. It is all too common for Windows users to be on the receiving end of malicious code via and innocent seeming .exe file.

Apple representatives said “Saving an untrusted file to the Windows desktop may trigger the issue, and lead to the execution of arbitrary code.” The fix for that particular problem has Safari now asking users before any file is saved - no exceptions. It also forces users to download files to their downloads and documents folders instead of the desktop, removing the malicious code from broad access to the user desktop and the programs and files accessed there.

Other problems solved by the update are an issue with Internet Explorer 7 being vulnerable to attack, and an issue with Javascript. Windows users should also find increased speed overall in the latest Safari iteration, and resolution for some other minor interface problems.

The update was released at the same time as apple opened its first flagship Apple Store in Australia. Other milestones coinciding with the update include the sale of 5 billion songs on popular music store iTunes. The company also has recently been mentioned for its developing Sproutcore framework and other developments. Apple always tried to acknowledge who discovers a problem, and is giving the credit for the discovery of Safari for Windows vulnerability to attack to Aviv Raff.

Related:

Entry was posted on Monday, June 23rd, 2008 at 4:33 pm under Apple, Hacks, Windows.  Print This Post

Read more entries by Leslie Poston.
Stumble It!