University Information Security Office

Flaw found in Safari for Windows

By Carrie-Ann Skinner

A flaw in Apple's Safari browser for Windows could be exploited by hackers in a bid to steal personal information from Web surfers, says an open source software developer.


According to Brian Mastenbrook, the flaw can only be exploited when Safari interacts with RSS feeds.

[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]

"Safari ... is vulnerable to an attack that allows a malicious web site to read files on a user's hard drive without user intervention," Mastenbrook said in a blog.

Mastenbrook, who also says that Mac OS X 10.5 users are also affected, even if they are not using the Safari browser, advises users to switch browsers until Apple issues a release for the bug.

PC Advisor is an InfoWorld affiliate.