Safari 4.0.5 fixes bugs, vulnerabilities
By Stephen Withers
Friday, 12 March 2010 09:30
Page 1 of 2
As usual, the update "is recommended for all Safari users" - not surprising when you look at the list of security fixes.
Most of the fixes relate to supporting frameworks rather than the application itself.
Thus the Windows version of Safari 4.0.5 includes updates to the ColorSync and ImageIO frameworks to prevent attacks via maliciously crafted TIFF or BMP images, images with malicious colour profiles. These issues either do not affect or have already been fixed in Mac OS X.
Most of the changes are in WebKit, and affect the Mac and Windows version. They include fixes for vulnerabilities to maliciously formed CSS, HTML or XML code.
What else has changed? And did Apple consider the Pwn2Own contest when releasing the update? See page 2.
