Argentinian hacker Juan Pablo Lopez Yacubian has discovered two critical flaws in Apple’s Safari 3.1 browser for Windows, according to security firm Secunia.
First, Yacubian says, an error when downloading a .zip file with an overly long filename can be exploited to cause memory corruption. “Successful exploitation may allow execution of arbitrary code,” Secunia’s Web site says.
In addition, an error in the handling of Windows can be exploited to display arbitrary content while showing the URL of a trusted Web site in the address bar, the researcher reported.
Resources for
