iThreats

Here’s worth noting information from Secunia.

A severe critical flaw in Safari was recently discovered and NO available patch yet released as of writing.  Brian Mastenbrook discovered this vulnerability last 13th January and disclosed the following information below:  [Further reading] 

————————————————————————————-

I have discovered that Apple’s Safari browser is vulnerable to an attack that allows a malicious web site to read files on a user’s hard drive without user intervention. This can be used to gain access to sensitive information stored on the user’s computer, such as emails, passwords, or cookies that could be used to gain access to the user’s accounts on some web sites. The vulnerability has been acknowledged by Apple.

All users of Mac OS X 10.5 Leopard who have not performed the workaround steps listed below are affected, regardless of whether they use any RSS feeds. Users of previous versions of Mac OS X are not affected.

Users of Firefox, Camino, and Opera on Mac OS X are substantially better protected against exploitation by a malicious web page than users of Safari or OmniWeb. If users of these browsers are asked to open a link in Safari, they should not allow the request and close the page which triggered the request immediately. All users of Mac OS X may still be affected by clicking on a malicious link from their email client, instant messaging program, or another application, and should perform the workaround steps given below.

————————————————————————————-

Good thing, there was no technical details disclosed. For sure, nosy attackers would never let it slipped without jumping into this opportunity.