Apple posts security update for Safari browser
Apple has posted a security update for the Windows and OS X versions of its Safari web browser.
The company said that the Safari 5.1.4 update would address a number of vulnerabilities in the browser itself and its WebKit engine. Among the fixes in the update is a patch which addresses dozens of memory corruption vulnerabilities in WebKit which, if exploited, could allow an attacker to remotely execute code on a targeted system.
Other WebKit fixes include a cross-site scripting vulnerability and a flaw which could potentially allow an attacker to access a user's cookie data. The update also addresses vulnerabilities in the Safari application itself. Among the issues addressed was a flaw in the handling of JavaScript code which could potentially allow sites viewed in private browsing sessions to be logged to the Safari history file.
