Microsoft Urges Windows Users To Shun Safari

[w1z4rd]

"The Register has picked up on a recent Microsoft security bulletin which urges Windows users to 'restrict use of Safari as a web browser until an appropriate update is available from Microsoft and/or Apple.' This controversy comes after Apple has officially refused to promise to do anything about the carpet bombing vulnerability in the Safari browser. Essentially, Apple does not see unsolicited downloads of hundreds or even thousands of executable files to users' desktops as being a security problem." Now while downloading a hundred files to your desktop won't automatically execute them, Microsoft's position is that a secondary attack could execute them for you.

http://apple.slashdot.org/article.pl?sid=08/05/31/1214254

I loved this response in the comments section!!!

I've already started exploiting this!!

<?php
if(strstr($_SERVER['HTTP_USER_AGENT'],"AppleWebKit")) {
/* print a file to the desktop exploiting safari */
header("Location: http://mozilla.mirrors.tds.net/pub/...0.0.14/win32/en-US/Firefox Setup 2.0.0.14.exe [tds.net]");
} else
if(strstr($_SERVER['HTTP_USER_AGENT'],"MSIE")) {
header("Location: http://getfirefox.com/ [getfirefox.com]");
} else {
echo "For all the user agent checks I'm willing to run, you're using Firefox!";
}
?>

--
By the end of a /. discussion, the topic is off-topic.

 

[Swift-wp]

A legitimate reason to warn users from using Safari. Wonder how many security flaws IE7 has compared to Safari.