Safari 3.1.2 for Mac OS X 10.4 Tiger Improves Security

Apple on Monday released Safari 3.1.2 for Mac OS X v10.4.11, designed to fix a memory corruption issue in WebKit’s handling of JavaScript arrays. According to Apple, visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking.

This update includes stability improvements and the latest security updates and is recommended for all Safari Tiger users. This issue is addressed in Safari v3.1.2 for Windows XP or Vista, and systems running Mac OS X v10.5.4.

Just over a week ago, Apple also released Safari 3.1.2 for Windows update, which provided a fix for the so called “carpet bomb” issue that was discovered by a security expert, Nitesh Dhanjani, in May. Carpet Bomb can litter the user’s Desktop or Downloads directory (~/Downloads/ in OSX)  without the user’s consent, because the Safari browser was not initially configured to obtain the user’s permission before it downloads a resource.

The new release of Safari 3.1.2 for Mac OS X v10.4.11 is available through Software Update or as a 49.2MB standalone download. Apple also released Security Update 2008-004 and Mac OS X 10.5.4.