Text Size

Safari 3.2 adds phishing protection, security updates

updated 06:00 pm EST, Thu November 13, 2008

Safari 3 2 update

Apple has released the latest update to its browser, Safari 3.2. Several security features have been added, including phishing protection and identification of online businesses. JPEG and TIFF image handling has been improved, preventing certain malicious files from closing the program or executing arbitrary code. XML document processing is also improved, correcting a heap buffer overflow vulnerability. For Windows users, bounds checking and zlib 1.2.2 issues have been addressed.

The previous version would sometimes allow form field information to be stored in the page cache, even if the autocomplete function was disabled. The new release properly cleans the form data to prevent access to sensitive information. The software now restricts the type of URL that can be launched from the plug-in interface, which reduces the change that a malicious website can access personal information.

Safari 3.2 is available as a free download from Apple Support. Versions are available for Windows, Tiger, or Leopard operating systems.

 
Previous Comments
Comment buried. Show

Protection by Crashing

11/13, 07:55pm (1 reply) reply

Presumably it protects us by crashing every time it starts up with a link provided by another program, e.g., clicking a link in Apple Mail or NetNewsWire, thereby preventing maliciousness from even getting going.

It also requires a restart to update the web browser.

Hello, is that you PC?

Guest

Fresh-Faced Recruit

Joined: Nov 1999

-14

Comment buried. Show

Avoid

11/13, 08:13pm (1 reply) reply

Keeps crashing constantly. I have been using Safari 3.2 for less than 10 minutes and I have got over 25 crashes. What a pile of c***.

Londor

Fresh-Faced Recruit

Joined: Feb 2004

-15

umm

11/13, 08:36pm (1 reply) reply

To all you complainers about Safari crashing, why don't you remove your 3rd party plugin c*** first and see if the crashes still occur. On 7 machines, I have yet to see one crash.

jarod

Fresh-Faced Recruit

Joined: Apr 2005

+11

PithHelmet Seems Toxic

11/13, 08:52pm reply

Very crashy after update. So I deleted SIMBL and its support files and PithHelmet. Seems fine now. I liked PithHelmet's ad blocking but can live without or try other add-ons. Or just use Firefox, except that i don't like Firefox window scrolling behavior. It's always somethin'...

lahaina

Fresh-Faced Recruit

Joined: Apr 2007

+4

re: Jarod

11/13, 09:42pm (1 reply) reply

ok, what are you saying? That 3rd party applications are havent been updated yet? You mean everything should work perfectly with all the c*** I install on my machine?get real Jarod.. I dont have time for troubleshooting. this is a mac and everything should work perfect./sarcasm

eldarkus

Fresh-Faced Recruit

Joined: Feb 2004

+2

Re: umm

11/13, 10:06pm reply

Yeah, but without the 3rd party c***, we have to put up with crappy web pages filled with flash animations, blinking graphics, slow load times, and an overall crappy experience.

Much better to just not install it (for there is really little to warrant rushing a download)

testudo

Fresh-Faced Recruit

Joined: Aug 2001

-7

3.2 works for me

11/13, 10:17pm reply

I couldn't get Safari 3.1 to launch my G5 Quad. Tried everything, it would just quit when launched. So I ended up using Firefox. Installed Safari 3.2 and it works. Not a single crash to report. Firefox has grown on me so I think I'll keep using it as my default browser.

revco

Fresh-Faced Recruit

Joined: May 2005

+2

No Problems Here...

11/13, 10:55pm reply

...including opening links from NetNewsWire.

Mojo

Mac Enthusiast

Joined: Apr 2000

+3

Don't use pithhelmet

11/14, 03:20am reply

Google using custom usercontent.css files to block ads. If your safari is crashing and you are wasting your time with things like pithhelmet then I think you have a PEBKAC error.

Remember the KISS principle.

aristotles

Senior User

Joined: Jul 2004

+2

RE: 3rd party "plug-ins"

11/14, 08:07am reply

Aren't really "plug-ins", they are in fact hacks, that are unsupported by Apple. They "plug-in" into applications through the OS X InputManager which was designed to customize text input. If you've installed these hacks and now find that Safari isn't working, don't blame Apple. Safari 3.2 works fine as is and that's all Apple will ever guarantee. So stop your whining and find another browser to use. There are many others to choose from.

The only real plug-in system is designed to extended support for media/object types; Flash, QuckTime, Perian, etc.

mjtomlin

Fresh-Faced Recruit

Joined: Oct 1999

+7

Popular News