Download Apple Safari 4.0.2

Apple has released an update to its Safari web browser. The browser is available for Mac OS X, Windows XP and Windows Vista, and for the iPhone and iPod touch. Safari has everything you’d expect from a modern browser, including tabs, an RSS reader, and a pop-up blocker. Plugins such as Flash, Java and Windows Media Player can be accessed via this page are brought in. In version 4.0 we find, among other things, a good-looking at-a-glance preview of the most visited websites, the program has become faster thanks to the Nitro engine and the system appearance is used under Windows. A comprehensive overview of the improvements is on this page to find. Version 4.0.2 fixes the following two security vulnerabilities:

WebKit

CVE ID: CVE-2009-1724

Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista

Impact: Visiting a maliciously crafted website may lead to a cross-site scripting attack

Description: An issue in WebKit’s handling of the parent and top objects may result in a cross-site scripting attack when visiting a maliciously crafted website. This update addresses the issue through improved handling of parent and top objects.

WebKit

CVE ID: CVE-2009-1725

Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: A memory corruption issue exists in WebKit’s handling of numeric character references. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of numeric character references. Credit to Chris Evans for reporting this issue.
Click on the image for a larger version.