Cable Forum - mac IE and safari vulnerabilities

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - mac IE and safari vulnerabilities (https://www.cableforum.uk/board/showthread.php?t=12485)

mac IE and safari vulnerabilities

Quote:

lixlpixel has reported a vulnerability in Mac OS X, potentially allowing malicious web sites to compromise a vulnerable system.

The problem is that the "help" URI handler allows execution of arbitrary local scripts (.scpt) via the classic directory traversal character sequence using "help:runscript".

It is reportedly possible to place arbitrary files in a known location, including script files, on a user's system if the Safari browser has been configured to ("Open "safe" files after download") (default behaviour) by asking a user to download a ".dmg" (disk image) file.

This has been confirmed on Macintosh OS X using Safari 1.2.1 (v125.1) and Internet Explorer 5.2.

Quote:

Solution:
Uncheck ("Open "safe" files after download") in "Safari -> Preferences -> General".

Do not surf the Internet as a privileged user.

Rename the help URI handler.

source: secunia.com

http://secunia.com/advisories/11622/

Re: mac IE and safari vulnerabilities

This specific vulnerability has been addressed in a security update from Apple, available via Software Update or as a download from apple.com.

The security update is also included in the latest OS update (to 10.3.4) for Panther users.

However, other similar vulnerabilities have come to light that Apple has not yet patched. These are simple to guard against and advice can be found here.

Re: mac IE and safari vulnerabilities

more information on the lack of a security update on the mac OS.

http://www.theregister.com/2004/05/2...ug_mishandled/