[Steve]

Secunia has notified two vulnerabilities in Apple's 'Safari' web browser, which can be exploited by malicious people to conduct spoofing attacks or potentially compromise a user's system. One relates to an error when downloading e.g. a .ZIP file with an overly long filename, which can be exploited to cause a memory corruption. Successful exploitation of this vulnerability may allow execution of arbitrary code.

There is also an error in the handling of windows which can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar.

The vulnerabilities are confirmed in version 3.1 for Windows. Other versions may also be affected.

Apple recently released version 3.1 of Safari fixing some 13 flaws, but the issues referred to above appear from the report to be present in the updated version 3.1 and are not yet fixed.