Safari 4.0.2 Brings Two Important Security Fixes

Posted by Sierra Monica B. in Internet on 07 9th, 2009 | no responses

Coming with several stability improvements and security fixes, the new Safari version released today for Mac OS X users is available for download.
Among the improvements and compatibility fixes, the new version of the web browser delivers an improved Nitro JavaScript engine and JavScript font.

Due to the two holes found in the WebKit, relating to the parent and top objects, you could encounter cross-site scripting attacks while navigating on malicious-loaded web sites. The update fixes this security issue as well.
The other problem encountered in all the supported platforms on which the browser runs was related to memory corruption and was found in the WebKit, at the level of handling numeric character references.
According to Apple, as you were visiting a malicious website, you could have encountered arbitrary code execution or unexpected application termination. This problem was detected and reported by Chris Evans.
Affected computers were those running Safari 4 on Windows, Mac OS X 10.5 and Mac OS X 10.4.

The latest Safari web browser version, 4.0.2, is available for automatic download via Software Update preferences by choosing Update Now. You also can obtain it manually from the Apple Downloads section. It is compatible with Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP and Windows Vista operating systems.