Welcome to WebmasterWorld Guest from 54.167.65.217

Forum Moderators: incrediBILL

Message Too Old, No Replies

Apple Safari, critical code bug

Watch out for pop ups

     
4:17 am on May 11, 2010 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member tangor is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 29, 2005
posts:6149
votes: 282


The latest version of Apple's Safari browser contains a critical bug that allows attackers to install malware on end user machines, security researchers have warned.

The flaw in the way Safari handles parent windows can be exploited "to execute arbitrary code when a user visits a specially-crafted webpage and closes opened pop-up windows," vulnerability tracking service Secunia warned here.

The vulnerability could also be exploited using booby-trapped email that's read using Safari, the US Computer Emergency Readiness Team said on Monday. It has been confirmed in version 4.0.5 for Windows, and the latest Mac version may also be affected.

[theregister.co.uk...]
9:27 am on May 11, 2010 (gmt 0)

Senior Member from LK 

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Nov 16, 2005
posts:2417
votes: 17


Why does email need to be read using a browser with Javascript enabled?

Why, for that matter, does reading email require a heavyweight rendering engine? There are plenty of light embeddable ones that would be harder to exploit.
4:03 pm on May 11, 2010 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member tangor is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 29, 2005
posts:6149
votes: 282


The popularity of webbased email makes it an ideal avenue for malware attacks... hence using a browser to read email. I do agree that JS, for the most part, should be deactivated at all times... activated only on a case by case basis.
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members