Safari not in the wild for an entire day before multiple vulnerabilities are found
Right on the download page for Safari, Apple states they designed their new browser to be "secure from day one" -- but what about day zero? It seems that within the first day of Safari's release into the Internet jungle, six security vulnerabilities have been found. The vulnerabilities -- including DoS (Denial of Service), memory corruption, and remote code execution bugs -- were discovered by security experts Aviv Raff, David Maynor, and Thor Larholm, and posted on their respective blogs.
Thor Larholm claims that within 2 hours of use, he located a "fully functional command execution vulnerability", while Aviv Raff says that within a moments of using Hamachi (a community-developed utility for verifying browser integrity) he was able to find a potentially exploitable memory corruption problem. Finding holes in the defenses of Apple's software is not a new hobby taken up by Aviv Raff -- previously, he worked on the "Month of Apple bugs", which was a publishing of information outlying multiple vulnerabilities in Apple software.
Although this is only a beta release of Safari 3, this security discoveries may give second thoughts to some of security-conscientious of the PC user-base that Apple hopes to woe. Apple claims that Safari is twice as fast IE7 and up to 1.6 times faster than Firefox 2 at rendering web pages, in addition to having a superior user interface. However, on the Safari download page, out of the twelve reasons Apple gives for loving Safari, security comes up in the last spot -- we here at Neoseeker hope that this twelfth place position is not indicative of its priority in Safari's further development.