Safari RSS flaw exposes sensitive data

Posted on 13 Jan 2009 at 08:15

Apple has acknowledged a vulnerability in Safari’s RSS handler that could allow a malicious website to read files and gain access to sensitive information stored on the computer.

Brian Mastenbrook, who discovered the flaw, says Apple has acknowledged the problem, but given no indication when a fix will be released.

Until it is, Mac Safari users are advised to switch to an alternative RSS reader, such as the free NetNewsWire and NewsFire apps, by changing the default RSS reader setting in Safari’s preferences.

As for Windows, Mastenbrook says the only option is to use another web browser. PC users who have Safari installed but do not use if for browsing are not exposed to the vulnerability.

For more information, see Disclosure of information vulnerability in Safari.

Author: Simon Aughton

Get more reviews, tutorials and in-depth advice, every month with Computer Shopper.
Click here to try 3 issues for £1

< Previous News : General Next >

Be the first to comment on this article

You need to Login or Register to comment.