Software Update: Apple Safari 5.0.5

Apple has released an update to version 5.0 of its Safari web browser. The browser is available for Mac OS X and for Windows XP, Vista and 7. Safari has everything you would expect from a modern browser, such as tabs, an RSS reader and a pop-up blocker. Plugins such as Flash, Java and Windows Media Player can be accessed via this page are brought in. New in version 5.0 is Safari Reader, with which web pages can be read without busy banners and columns. Furthermore, the performance has been improved, the support for HTML 5 has been further expanded and the address bar has become smarter. Version 5.0.5 fixes two security vulnerabilities in Webkit.

Safari 5.0.5

• WebKit
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: An integer overflow issue existed in the handling of nodesets. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
• WebKit
  Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
  Description: A use after free issue existed in the handling of text nodes. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
• Certificate Trust Policy
  Several fraudulent SSL certificates were issued by a Comodo affiliate registration authority. This may allow a man-in-the-middle attacker to redirect connections and intercept user credentials or other sensitive information. Safari relies on the certificate store of the host operating system to determine if an SSL server certificate is trustworthy. For Mac OS X systems, this issue is addressed with Security Update 2011-002. For iOS, this issue is addressed with iOS 4.3.2 and iOS 4.2.7. For Windows systems, applying the update described in Microsoft Knowledge Base Article 2524375 will cause Safari to regard these certificates as untrusted. The article is available here.