Safari update fixes "carpet bomb" flaw

출처 : http://www.securityfocus.com/brief/760

Apple released a patch for the Windows version of its Safari Web browser on Thursday, fixing four flaws including one that allows attackers to place an unlimited number of untrusted executable files on the desktop.

Apple had previously told the flaw finder that the issue, dubbed the"carpet bombing" bug security consultant Nitesh Dhanjani, would not be fixed. A second researcher, Aviv Raff, found a way to execute files on the desktop without notifying the user. Microsoft argued that the combination of the two flaws constituted a legitimate security weakness that needed to be fixed.

자세한 내용은 아래링크를 방문해보세요.

http://www.securityfocus.com/brief/760

Safari 3.1.2 for Windows

http://support.apple.com/kb/HT2092
http://www.apple.com/support/downloads/