Safari 4.0.5 fixes bugs, vulnerabilities

Stephen Withers
Friday, 12 March 2010 10:30

Business IT - Security

The latest version of Apple's Safari browser delivers improved performance and fixes 16 security vulnerabilities.

Apple has updated its Safari browser for Mac OS X and Windows.

As usual, the update "is recommended for all Safari users" - not surprising when you look at the list of security fixes.

Most of the fixes relate to supporting frameworks rather than the application itself.

Thus the Windows version of Safari 4.0.5 includes updates to the ColorSync and ImageIO frameworks to prevent attacks via maliciously crafted TIFF or BMP images, images with malicious colour profiles. These issues either do not affect or have already been fixed in Mac OS X.

Most of the changes are in WebKit, and affect the Mac and Windows version. They include fixes for vulnerabilities to maliciously formed CSS, HTML or XML code.

What else has changed? And did Apple consider the Pwn2Own contest when releasing the update? See page 2.