Apple bug

Security flaw hits Safari on Windows

Researcher demolishes Apple's security claims

Written by Tom Sanders in California

Security researcher Aviv Raff claims to have found the first security vulnerability in Apple's Safari browser on Windows only hours after the software was released.

Raff tested the application against a standard browser security testing tool.

"A first glance at the debugger showed me that this memory corruption might be exploitable. Although I'll have to dig more to be sure of that," he wrote on his blog.

Apple unveiled a beta of a Windows version of its Safari web browser on Monday. The final product is scheduled for release in October.

In a keynote presentation at Apple's Worldwide Developers Conference in San Francisco, chief executive Steve Jobs claimed that the browser would run up to twice as fast as Microsoft's Internet Explorer, but did not mention Internet Explorer's security record.

Apple lists the browser's security as one of 12 reasons "why you'll love Safari" and adds that "Apple engineers designed Safari to be secure from day one ".

Raff worked on the "Month of Apple bugs" earlier this year, during which researchers published details on a slew of vulnerabilities in the software.

It was intended to challenge Apple's security record. He took the company's boasting about Safari's security as a personal challenge.

"So I've decided to take it for a test drive and ran Hamachi. I wasn't surprised to get a nice crash few minutes later," he wrote. Hamachi is a tool that tests a browser's integrity.

"Don't you hate those pathetic claims?" he said in the closing of his post in reference to Apple's marketing speak.

Apple did not immediately respond to a request for comment.

Tags:

Further reading

Apple brings Safari to Windows

'The fastest browser on Windows,' Jobs claims   More...

Apple woos kids with Summer Camps

Free workshops for eight to 12 year-olds   More...

Apple talks up OS X Leopard

Jobs sings praises of revamped Finder and desktop   More...

Apple calls on iPhone developers

Third-party apps to run on Safari engine, but no direct access to the phone   More...

Related articles

iPhone and Leopard take centre stage at WWDC

Jobs gears up for smartphone and OS releases   More...

QuickTime flaw adds to Apple's woes

Exploit especially dangerous for Firefox users   More...

iPod Touch offers iPhone without the phone

Media player gains Wi-Fi and touch screen   More...

Apple to announce 3G iPhone on 9 June

Steve Jobs to unveil next-gen handset at Worldwide Developers Conference   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

04 Jul 2008

5.51 MBPodcast Special: Views from the Valley More...

03 Jul 2008

3.46 MBGreen grid computing, Trojans stop play and location-based services More...

02 Jul 2008

3.2 MBOnline TV, SME security and flexible laptops More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Online pornography

US rebate cheques spent on porn

Economic stimulus package works wonders   More...

Louis Vuitton

UK online fake goods market worth £800m

Legal experts warn of dramatic rise in 'e-fencing'   More...

Advertisement

Fibre-optics

New fibre-optic connections overtake cable

Broadband first-timers choosing fibre where possible   More...

Stars and Stripes

Cyber-crooks celebrate Independence Day

Security firms warn users to take extra care   More...

Advertisement