Security & Privacy

Apple has issued a security update for the Safari web browser, incrementing the program to version 4.0.5. This update covers a total of 16 vulnerabilities in ColorSync, ImageIO and WebKit (the framework used to render web pages), but only ten of these affect Mac OS X (the others affect the Windows version of the program).

A number of these issues could have the following consequences:

Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.

These issues involve the way WebKit handles “CSS format() arguments”, “HTML object element fallback content”, “XML documents”, and “incorrectly nested HTML tags” among others.

Full information is available here, and users can download the new version of Safari using Software Update, or from the Safari download page.