June 2008

ID: 3627
Date: 02/06/2008

---

Title: 3627 - Apple Safari on Windows Code Execution Vulnerability
Platform level affected:Net Application - Client
Hardware components affected:Intel PC
Specific operating systems components affected: 32-bit Windows
Net-enabled software: Other
Security software:Other
Other software: Web Browser
Remediation Summary:Special Event. Be on your guard at this time.
Vendors affected:Apple
Applications affected:Safari
Adversity source: Unknown
Attack Vector: Vulnerability exploitation
Virulence: Unknown
Warning Status: Proof of concept
Potential Damage: Remote execution/modification
Possible Duration: Open Ended
Availability of fix: Future
Type of fix: None
Source: Secunia
Reliability of source: Unknown
Source URL: http://secunia.com/advisories/30467/
Abstract: A vulnerability has been reported in Apple Safari in combination with Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

TITLE:

Apple Safari on Windows Code Execution Vulnerability

SECUNIA ADVISORY ID:

SA30467

VERIFY ADVISORY:

http://secunia.com/advisories/30467/

CRITICAL:

Highly critical

IMPACT:

System access

WHERE:

From remote

OPERATING SYSTEM:

Microsoft Windows XP Home Edition

http://secunia.com/product/16/

Microsoft Windows XP Professional

http://secunia.com/product/22/

Microsoft Windows Vista

http://secunia.com/product/13223/

SOFTWARE:

Safari for Windows 3.x

http://secunia.com/product/17978/

DESCRIPTION:

A vulnerability has been reported in Apple Safari in combination with Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a combination of errors related to the default download location in Safari and the Windows desktop handling of executables.

Successful exploitation allows execution of arbitrary code when a user visits a malicious web site.

The vulnerability is reported in Safari running on Windows XP or Vista.

SOLUTION:

Set the download location in Safari to a location other than "Desktop".

PROVIDED AND/OR DISCOVERED BY:

Reported in a Microsoft Security Advisory.

ORIGINAL ADVISORY:

http://www.microsoft.com/technet/security/advisory/953818.mspx

----------------------------------------------------------------------

About:

This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe:

http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)

http://secunia.com/about_secunia_advisories/

 

Please Note:

Secunia recommends that you verify all advisories you receive by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

----------------------------------------------------------------------

 

This advisory contains information released by the original author. Some of the information may have changed since it was released. If the issue affects you, it may be prudent to retrieve the advisory from the site of the original source to ensure that you receive the most current information concerning that problem. Reference to any specific commercial product, process, or service by trade name, trademark manufacturer, or otherwise, does not constitute or imply its endorsement, recommendation, or favouring by CPNI.

The views and opinions of authors expressed within this notice shall not be used for advertising or product endorsement purposes. CPNI shall not accept responsibility for any errors or omissions contained within this advisory. In particular, they shall not be liable for any loss or damage whatsoever, arising from or in connection with the usage of information contained within this advisory.

CSIRTUK is a member of the Forum of Incident Response and Security Teams (FIRST) and has contacts with other international Incident Response Teams (IRTs) in order to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing amongst its members and the community at large.