Categories: MacSecurityWorkspace

Apple Patches Dozens Of Safari Security Flaws

Apple has patched 58 security flaws in its Safari web-browser and the open source WebKit browser engine this week.

The flaws affect Windows 7, Vista, XP SP2 or later and Mac OS platforms and it is recommended all users update to Safari 5.1.

The vulnerabilities could allow invaders to execute arbitrary code, perform cross-site scripting attacks or disclose sensitive information, the US Computer EmergencyRreadiness Team (CERT) said on its site.

The flaws also involve buffer and integer overflows and multiple memory corruption issues, according to Apple.

Potentially devastating arbitrary code attacks could be executed just by visiting maliciously crafted websites or TIFF downloads.

A busy week for Apple

As well as responding to the holes in Safari. Apple has also introduced several new security features including a ‘Privacy Pane’ setting which allows for managing and deleting cookies, sandboxing of web content and apps and private autofill of web forums.

The update comes hot on the heels of Apple’s latest Mac OS, codenamed Lion, and record-breaking financials for the last quarter. The Safari 5.1 update is included in Lion.

The perception of Mac OS X’s relative immunity to malware has been exposed as a fallacy in recent months as fake AV and malware has surfaced to take advantage of Apple products’ growing popularity.

David Jamieson

View Comments

  • I just updated to Snow Leopard 10.6.8 and Safari 10.5 on 7/22/2011.

    Unfortunately, Safari now seems utterly transparent to any website setting cookies, even if the Block "Always" setting is chosen. After "Removing All Website Data" and seeing none, on the next opening Safari and any website,morecookies are set.

    After two calls to Apple support, the explanation was just that is how Safari operates. Very frustrating and disappointing.I am now a confirmed Firefox user.

Recent Posts

Microsoft Beats Expectations Thanks To AI Investments

Customer adoption of AI services embedded in cloud services continues to deliver results for Microsoft,…

3 days ago

Google Delays Removal Of Third-Party Cookies, Again

For third time Google delays phase-out of third-party Chrome cookies after pushback from industry and…

4 days ago