Apple posts critical Safari security updates

Apple has released a major security update for Safari, addressing 27 vulnerabilities within the browser's WebKit engine.

The Safari 5.0.3 and 4.1.3 updates are for current versions of Safari 4 for OS X 10.4 Tiger and Safari 5 for OS X Leopard, as well as Windows 7, XP and Vista.

Twenty-four of the flaws fix issues which could allow an attacker to remotely execute code on a target system. The patched WebKit items include components to handle images, scroll bars and editing commands.

Other flaws include possible data disclosure vulnerabilities in the handling of JavaScript information, and a flaw in the handling of images which could allow a third party to view image data.

The update also corrects stability issues with JavaScript and VoiceOver data, provides performance improvements for Safari's pop-up blocker, Flash plug-in and Top Hit results.

The Safari update comes just one week after Apple issued a major security patch for OS X that included more than 50 patches for the Macintosh version of Flash Player.

Customers can obtain the patch through Apple's Software Update tool or from the company's support site.