Apple releases Windows Safari 3.0.1, squishes security bugs
By Ryan Block 
posted June 14th 2007 12:37PM
posted June 14th 2007 12:37PM
Looks like Apple's issued a new version of the public beta of Safari for Windows today -- highest on the list of fixes were patches for thee three separate security vulnerabilities that cropped up mere hours after launch. There's never any software that's 100% secure, but at least now it's that much safer for Windows users to go hunting wild internet on Safari 3.0.1. (Details on the fixes after the break.)Update: Wow, just 48 hours after launch and already Apple's clocked in over a million Safari for Windows downloads. Info here. Let's just hope the next million downloads are from users snagging the 3.0.1 update.
CVE-ID: CVE-2007-3186
Available for: Windows XP or Vista
Impact: Visiting a malicious website may lead to arbitrary code execution
Description: A command injection vulnerability exists in the Windows version of Safari 3 Public Beta. By enticing a user to visit a maliciously crafted web page, an attacker can trigger the issue which may lead to arbitrary code execution. This update addresses the issue by performing additional processing and validation of URLs. This does not pose a security issue on Mac OS X systems, but could lead to an unexpected termination of the Safari browser.
CVE-ID: CVE-2007-3185
Available for: Windows XP or Vista
Impact: Visiting a malicious website may lead to an unexpected application termination or arbitrary code execution
Description: An out-of-bounds memory read issue in Safari 3 Public Beta for Windows may lead to an unexpected application termination or arbitrary code execution when visiting a malicious website. This issue does not affect Mac OS X systems.
CVE-ID: CVE-2007-2391
Available for: Windows XP or Vista
Impact: Visiting a malicious website may allow cross-site scripting
Description: A race condition in Safari 3 Public Beta for Windows may allow cross site scripting. Visiting a maliciously crafted web page may allow access to JavaScript objects or the execution of arbitrary JavaScript in the context of another web page. This issue does not affect Mac OS X systems.
ionno that seemed like a contradiction to me too.
ya, well, im a PC guy, and i dont keep up much with mac news[this is the exception]. i know the guys down at microsoft are high half the time... but so is Jobs
Much better interface? Oh really? Does Safari allow you to press backspace and go to a previous page? The interface is pretty much useless to a Firefox/Opera user. Keep Safari where it should be. On a mac.
Faster page rendering would be good if it renders all of the pages correctly.
> Does Safari allow you to press backspace and go to a previous page?
Actually yes, yes it does.
As far as I'm concerned, Safari's prettier (both in itself and its rendering), faster, supports more advanced CSS features and is more logical. I don't want myriad add-ons, I just want to browse the web.
Oh, by the way - Safari's got the most accurate rendering of all major browsers. For instance, which browser passed acid2 first, eh? Firefox is more _compatible_, certainly - but that comes at a price for both developers and end users. Credit to the guys and gals who work on it, they do a good job.
My reasons for preferring Safari are largely subjective, which is fine. I've got no objections to anyone holding different subjective opinions ;-) But get your facts right, please...
I know its still beta, but I get faster page loads with IE, and that's really sad. Also, don't try anything Java-based (like Runescape). Something that looked like an Apple version of Java (three types of Java now?) started loading, then the entire thing crashed.
I have XP and a two monitor (Dualview) setup. If I drag the Safari window to the second display (without the taskbar) and maximise, the entire window vanishes and I have to Ctrl+Alt+Del to close the program. Not good.
I haven't even tried it on my Mac at home, as I hear it buggers up Widgets.
Try using Ultramon with your dual monitor setup. With it you can have a separate taskbar on each desktop.
Mine keeps crashing when I click the + incon or the bookmark icon in the bookmark toolbar. (winXP sp2)
Ive never used safari So iam not gonna bash it till i get my hands on a MAC which should be soon. but i seriously doubt any windows users using either FF or IE are gonna switch to a MAC just for a web browser. imagine me the convo
Bill: hi ted whatcha got there?
Jimmy: oh its my new MAN.
Bill: OH i thought u had a PC.
Jimmy: Ah yeah i did i bought this $1400 new MBP b/c i just loved the web browser Safari that APPLE had.
Bill:Our friendship is over!......ASSCLOWN
Jimmy:... : (....But it just works!
Neeko, this may come as news to you, but Safari is now available on Windows. No need to buy a MAC (sic) to use it.
damn typos...STILL FUNNY THOUGH.
Text and windows control buttons still missing on my windows PC. (as stated by others) I have not seen this addressed in Apples bug list, unless I over looked it.
Anyone find a solution to the problem of no text in both main window and buttons like forward/backward ...etc.. ?
I thought I would bring this up...In Job's Keynote the pie graph of browser market share shows the current market. His speech goes on to say how many FF downloads there are a day and compared to iTunes downloads. (If you missed it - there was a large difference) The next graph showed the market share Apple was trying to reach - the graph now has all of the other browser percentage covered but none of the IE market share. One can speculate that Apple with it's resources may be in talks to partner with Mozilla - which is a bit better than competing - for Apple. And if they were to compete with FF for market share what value would the average user (not like us tech savy) bring? Probably the next cool thing that Apple will deliver to us.
If your Safari can do what your FF does and then provide a value of better security and speed - you'll switch. Right? Everyone of us knows the answer is yes. To be forced to switch is what everyone HATES. Choice is good...web apps working differently in each browser is bad.
I am a huge fan of Apple - if you can't tell and I'm huge fan of cross OS software and cross browser web development. The day that comes when I can build a site/app using web standards and it perform like I want on every OS and browser will be awesome.
-Nickmenow
Safari is fun and all, and it's pretty freakin' fast, but I think I'll stick with FireFox. I really don't notice the .4 second difference anyway, lol.
I tried out Safari last night on my laptop with XP... I didn't really notice too much of a load time difference vs firefox, but one thing I did notice is that where firefox pixelated a resized image pretty badly, safari rendered it as if that was the original size. Hmmm. I have a laptop and a desktop, and currently both have installed Internet Explorer, Firefox, Safari, and Opera, and now I'm trying to pick a favorite of those last three.
I use a mac everyday at work and even I steer away from Safari. There have been too many occasions where Safari has stopped responding or crashed while browsing. It may be slightly faster than firefox but I have a lot more peace of mind browsing with firefox than I do safari.
Like one guy earlier said, the first thing I do now with a fresh OSX is open safari to download firefox.
Oh, and on windows, Safari is rather ugly :)
Also it disappears when you try to full screen it on a secondary monitor.
when I've tried my Safari 3.0.1 beta on my MAC. My Yahoo Messenger didn't worked right. The safari beta still needs more improvement. So I uninstall it and switch back to the stable version.
Safari need some support in Complex language
Safari need some support in complex language