Tech titan Apple has confirmed patches for a long list of vulnerabilities in its Safari browser, which could have allowed attackers to gain system access on people’s Mac OS X machines.
Many of the flaws were resident in the WebKit browser engine that Safari uses, allowing an outsider to corrupt memory. Safari 6 and 7 are both affected.
“Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution,” Apple said of the Webkit flaws, in its advisory.
A separate WebKit logic issue, identified by Ian Beer of Google Project Zero, was also patched. “An attacker running arbitrary code in the WebProcess may be able to read arbitrary files despite sandbox restrictions,” Apple warned.
A total of 27 flaws were fixed, across Mac OS X Mountain Lion and Mavericks operating systems. The Safari 7.0.3 and 6.1.3 updates will fix the issues.
It was only in February that Apple was forced to issue fixes across iOS and Mac OS X for a weakness in the operating systems’ handling of SSL encryption.
Are you a security expert? Try our quiz!
German foreign minister warns Russia will face consequences for “absolutely intolerable” cyberattack on ruling party,…
Google is reportedly laying off at least 200 staff from its “Core” organisation, including key…
Investor appeasement? Apple unveils huge $110 billion share buyback program, as sales of iPhone decline…
Tesla retreats from pioneering gigacasting manufacturing process, amid cost cutting and challenges at EV giant
No skynet please. After the US, UK and France pledge human only control of nuclear…
Microsoft's AI investments continue in south east Asia, after investments in Japan, Malaysia, Indonesia, as…