Apple bug

Security flaw hits Safari on Windows

Researcher demolishes Apple's security claims

Tom Sanders in California

Security researcher Aviv Raff claims to have found the first security vulnerability in Apple's Safari browser on Windows only hours after the software was released.

Raff tested the application against a standard browser security testing tool.

Advertisement

"A first glance at the debugger showed me that this memory corruption might be exploitable. Although I'll have to dig more to be sure of that," he wrote on his blog.

Apple unveiled a beta of a Windows version of its Safari web browser on Monday. The final product is scheduled for release in October.

In a keynote presentation at Apple's Worldwide Developers Conference in San Francisco, chief executive Steve Jobs claimed that the browser would run up to twice as fast as Microsoft's Internet Explorer, but did not mention Internet Explorer's security record.

Apple lists the browser's security as one of 12 reasons "why you'll love Safari" and adds that "Apple engineers designed Safari to be secure from day one ".

Raff worked on the "Month of Apple bugs" earlier this year, during which researchers published details on a slew of vulnerabilities in the software.

It was intended to challenge Apple's security record. He took the company's boasting about Safari's security as a personal challenge.

"So I've decided to take it for a test drive and ran Hamachi. I wasn't surprised to get a nice crash few minutes later," he wrote. Hamachi is a tool that tests a browser's integrity.

"Don't you hate those pathetic claims?" he said in the closing of his post in reference to Apple's marketing speak.

Apple did not immediately respond to a request for comment.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Apple

Apple brings Safari to Windows

'The fastest browser on Windows,' Jobs claims

Apple

Apple woos kids with Summer Camps

Free workshops for eight to 12 year-olds

Apple talks up OS X Leopard

Jobs sings praises of revamped Finder and desktop

Apple calls on iPhone developers

Third-party apps to run on Safari engine, but no direct access to the phone

Related whitepapers

Related jobs

Most watched

Summit video: Intel discusses processors designed for data overload (part one of two)

Intel explains how its Xeon processors can handle data-intensive apps

Summit: Intel discusses processors for data overload (part 2 of 2)

More thoughts on how servers can help manage overload

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

deloitte

Summit interview: Deloitte discusses security implications of the data deluge

We chat to Mike Maddison, UK head of Security, Privacy...

ibm logo

IBM boosts mobile shopping with WebSphere Commerce

Update designed to give mobile users a richer, more personalised...

Summit: Intel discusses processors for data overload (part 2 of 2)

More thoughts on how servers can help manage overload

chrome logo

Google plans a Mac version of Chrome

A Mac-friendly version of the browser is in the pipeline

Primary Navigation