MacDailyNews - Where Mac news comes first

 MacDailyNews Poll

Deal of the Day

5 Day Most Commented

Opinion Archive

Current Headlines

Latest Joy of Tech

  • Latest Joy of Tech!

MacNN

AppleInsider

Macworld UK

TUAW

MacRumors

Yahoo! Finance AAPL

iTunes Top 10 Albums

Mac OS X Downloads

Sun, Jul 05, 2009 - 12:04 AM EDT  —  AAPL: 140.02 (-2.81, -1.97%)  |  NASDAQ: 1796.52 (-49.20, -2.67%)

Apple releases Safari Beta Update 3.0.3
Tuesday, July 31, 2007 - 10:50 PM EDT

Apple today released Safari Beta 3.0.3 which is recommended for all users and improves its security and stability.

Safari 3 Beta Update 3.0.3 security content:

Safari

CVE-ID: CVE-2007-3743

Available for: Windows XP or Vista

Impact: Adding bookmarks may lead to an unexpected application termination or arbitrary code execution

Description: A stack buffer overflow vulnerability exists in Safari's bookmark handling. By enticing a user to add a bookmark with an overlong title, an attacker may trigger the issue which may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing proper bounds checking. This issue does not affect Mac OS X systems.

WebKit

CVE-ID: CVE-2007-2408

Available for: Mac OS X v10.4.9 or later, Windows XP or Vista

Impact: Visiting a malicious website may allow Java applets to load and run even when Java is disabled

Description: Safari provides an "Enable Java" preference, which when unchecked should prevent the loading of Java applets. By default, Java applets are allowed to be loaded. Navigating to a maliciously crafted web page may allow a Java applet to be loaded without checking the preference. This update addresses the issue through a stricter check of the "Enable Java" preference. Credit to Scott Wilde for reporting this issue.

• WebKit

CVE-ID: CVE-2007-3742

Available for: Mac OS X v10.4.9 or later, Windows XP or Vista

Impact: Look-alike characters in a URL could be used to masquerade a website

Description: The International Domain Name (IDN) support and Unicode fonts embedded in Safari could be used to create a URL which contains look-alike characters. These could be used in a malicious web site to direct the user to a spoofed site that visually appears to be a legitimate domain. This update addresses the issue by through an improved domain name validity check.

• WebKit

CVE-ID: CVE-2007-3944

Available for: Mac OS X v10.4.9 or later, Windows XP or Vista

Impact: Viewing a maliciously crafted web page may lead to arbitrary code execution

Description: Heap buffer overflows exist in the Perl Compatible Regular Expressions (PCRE) library used by the JavaScript engine in Safari. By enticing a user to visit a maliciously crafted web page, an attacker may trigger the issue, which may lead to arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller and Jake Honoroff of Independent Security Evaluators for reporting these issues.

Safari Beta Update 3.0.3 is available via Software Update.

[Thanks to MacDailyNews Reader "Fred Mertz" for the heads up.]

Bookmark and Share

Always -- Free ground shipping with orders over $50 at the Apple Store.

Reader Feedback: = registered.
Unregistered users: Feedback from multiple usernames are subject to deletion. Off-topic and posts from suspected astroturfers will be removed.

Jul 31, 07 - 10:55 pm Comment from: Jim - TIV

I'm feeling seriously dissed... lol

Jul 31, 07 - 11:30 pm Comment from: DavidO

Haven't had the courage to try out this beta yet. I'm curious to know how it's working for those of you braver than I. I'd be using it on a 14" G4 iBook. Thanks for any info.

Jul 31, 07 - 11:36 pm Comment from: Eric

Its amazing how fast Apple does updates compared to Microcrap.....

Jul 31, 07 - 11:37 pm Comment from: Jim - TIV

DavidO... I'm running it now on a lampstand iMac, seems stable enough, MDN loads faster. CNN and FoxNews load about the same.

Jul 31, 07 - 11:37 pm Comment from: JadisOne

The Safari Beta works well for me, DavidO. Installed it on a 2.0 GHz Core Duo MacBook. However, I get the spinning beachball if I let the app sit open for a very long while (>1d uptime).

Jul 31, 07 - 11:53 pm Comment from: ibookfast

Safari beta has been pretty good, not sure why but lately it has been acting a bit wonky, w/ the update it seems much better/snappier. Not sure if the 2.0 versions had it.. but there are some nice right click features with the tab bar like "New Tab" "Reload All Tabs" "Add Bookmarks For These (x#of) Tabs", etc.

Jul 31, 07 - 11:54 pm Comment from: Rob

I've been using Safari 3.02 beta for a few weeks now and LOVE IT! The options to save a bookmark for multiple tabs and the option to reopen all windows/tabs from the previous session are great additions. So far, it's been pretty stable. My only recurring problem is sometimes having problems typing an address into the URL line. It will occasionally be very slow and hesitate several seconds for each character typed. No problems entering in the Google bar or using bookmarks though when the URL problem occurs.

Jul 31, 07 - 11:57 pm Comment from: Rob

PS: I'm using a G5 iMac with OS 10.4.10.

Aug 01, 07 - 12:10 am Comment from: macca

safari now seem a lot slower.

Aug 01, 07 - 01:10 am Comment from: Javbw

Been running the beta on an intel iMac since the day it was released. Love it. No real issues encountered, and I like the "you have text on this page that is not saved" deal, usually related to leaving comments or editing stuff with google. great feature.

the updated "find" in the pages is by far the best feature, I'd risk the beta just for that. they give you an uninstaller to revert with the main installer, so take the plunge.

Aug 01, 07 - 01:12 am Comment from: MacSmiley

Safari Beta hustles for me on my 800MHz G4 iMac.

What I'm still ticked off about is that Apple hasn't updated the graphics to match the Windows version.

... and don't tell me they will update in Leopard. If 3rd party developers can change the graphics of Safari, then so can Apple.

Aug 01, 07 - 02:16 am Comment from: Lazy European

My one and only issue with Safari 3 is that it modifies Webkit in such a way that websites I made in Freeway don't properly display slave images anymore: not in Safari, not in Shiira. My other machine still runs Safari 2 and there everything is just fine.

Aug 01, 07 - 03:32 am Comment from: nekogami13

Safari stills exists?
People actually use it?

What has the world come to-first rate OS and hardware, third rate browser :(

Aug 01, 07 - 03:42 am Comment from: Macaday

Safari is by a long way the nicest rendering browser out there - crisp and clean.

Oh, and the fastest too.

Aug 01, 07 - 04:20 am Comment from: SKY LARK

@nekogami13

Oh, very funny - not ... did you manage to think that up all by yourself, how is the life of a eleven year old these days?
As a long time Safari user and soon to be updated to the 3.0.3. beta - For me Safari 3 is excellent. You can keep your IE, Firefox and others as they are IMHO not up to it, and they all sit on my dock updated, but rarely used.

Aug 01, 07 - 04:22 am Comment from: Hg Wells

@Lazy European
You're right about the Freeway sites problem...and the newest release doesn't seem to help at all!

Aug 01, 07 - 07:18 am Comment from: Lardlad

Resizing text areas, re-arranging tabs and a warning about closing multiple tabs make it worth it to me. Other than that, it's not really much different. I'd say it is capable to be your full time browser unless there is a huge vulnerability that has not been discovered.

For the final I'd like to see rss feeds load a bit quicker. Still seems slow to me.

Aug 01, 07 - 07:20 am Comment from: Lardlad

Oh I forgot to mention the 'Web Inspector.' SUPER useful tool for web designers.

Aug 01, 07 - 08:40 am Comment from: M@c

I just have to say how pleased I am with the new Netscape Beta. It is quite fast, and each and every site that I go to loads correctly and completely.

I recommend the new Netscape to you all, try it out!

Aug 01, 07 - 08:40 am Comment from: dave

The javascript support in safari 3 is far, far faster than in 2. On ppc anyway.

Has also been more stable for me. But that might just be the js engine not locking up.

Aug 01, 07 - 09:08 am Comment from: DLMeyer

I've been using Safari 3 Beta on both my XP (LabRat) and my G5 (OverKill) since Day 1. All sorts of "stable" on both, but one small problem. It won't upload my shows. It seems to be doing it, the progress bar does its thing, then ... nothing. Media not on the host, though the ancillary content has been added and properly posted. I'll keep trying, but I expect to be reverting to Firefox (my backup) until this gets fixed.

DLMeyer - the Voice of G.L.Horton's Stage Page pod cast - currently featuring the ICWP Retreat

Aug 01, 07 - 09:40 am Comment from: Mr. Peabody

Did I miss something? What's with releasing a major Safari update outside of a major OS update? Is the big deal that it's now on Windows? Is that it?

Cheers

Aug 01, 07 - 10:39 am Comment from: Woody

Hope this fixes a session problem I'm having with certain CMS software. 3.0.3, here I come!

Aug 01, 07 - 01:32 pm Comment from: Macsweep

I just downloaded Safari 3.0.3 for Macintosh.

Aug 01, 07 - 03:32 pm Comment from: ibookfast

Macsweep did you hit the submit button a little early ?

.... one thing I noticed fixed is the scroll bar is rendering better, before, occasionally, it was too long but corrected itself once moved/clicked. Also MDN's rss feed still doesn't show a preview only the title of the article. You see it half second, then you don't, hmm. machine specs: ibook 12" 1.2 GHz, 768 ram. 10.4.10

Aug 01, 07 - 06:11 pm Comment from: Jerry T

Safari on Windows Problem,

Safari doesn't respond to my back or forward mouse buttons in Windows XP. The forward and back buttons on the browser work fine. Can Safari go back or forward from a mouse button?

iTunes does this sometimes too. Sometimes I can go forward or back pages on iTMS from my mouse and sometimes it doesn't work I have to use the iTunes navigation buttons.

Any solutions or anyone else have that issue?

Aug 03, 07 - 11:08 am Comment from: DavidO

Many thanks to those who responded to my question above (July 30, 11:30 PM) about how folks were doing with the Safari 3 beta. I read the following comments, got brave, and decided to give it a try. After using it for 36 hours I have only positive things to say: totally stable and faster, with helpful new features (including spell checking in this MDN window as I type!). Thanks again.

Reader feedback page 1 of 1 pages:

Always -- Free ground shipping with orders over $50 at the Apple Store.

Add Your Feedback:

Register or Login

Name:

Email: (optional)

Emoticons | Allowed HTML Tags

Remember my info   Notify me of follow-up comments?

Please enter the "MDN Magic Word" you see in the image below: