Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »
Social Responsibility's Strategic Benefits
December 15, 11:30 AM - 12:30 PM US/Eastern (GMT-5)
Join Ed Granger-Happ, CIO of Save the Children, for a discussion of how creating an organization that is socially responsible improves staffing, retention, leadership development and overall corporate health.
Working With and Communicating to Your Board of Directors
January 13, 2009, 4:00 PM - 5:00 PM US/Eastern (GMT-5)
CIO panelists who will share tips and experiences working with their boards: Twila Day of SYSCO; Jeff O'Hare, West Corp.; Marc West, formerly with H&R Block.
IT's Role in Growing Mid-Market Companies
January 14, 4:00 PM - 5:00 PM ET (GMT-5)
Mid-market Council members will share their companies' stories and challenges in driving or coping with growth. Panelists represent Veterinary Pet Insurance, Medicis Pharmaceutical, and Intrax Cultural Exchange.
Learn more about the CIO Executive Council »
Apply today for a FREE subscription to CIO Magazine!
Apple Fixes Safari 'carpet Bomb' Bug
Apple has reversed course and patched a bug in its Safari browser after security researchers showed how it could be used to run unauthorized software on a Windows machine.
June 19, 2008 — IDG News Service —
Apple has reversed course and patched a bug in its Safari browser after security researchers showed how it could be used to run unauthorized software on a Windows machine.
The "carpet bomb" bug, which was originally discovered by security researcher Nitesh Dhanjan, was initially thought to be less serious than it turned out to be.
Dhanjan showed how Safari could be misused to litter a victim's desktop with downloaded programs, but two weeks after he disclosed his research, another hacker, named Aviv Raff, showed that this flaw could be exploited in tandem with other problems in Windows and Internet Explorer to run unauthorized software on a victim's PC.
That prompted Microsoft to issue its own warning about the issue. It also caused some security experts to caution Web surfers about using Safari on the Windows platform.
According to Dhanjan, Apple initially told him that it did not intend to fix the issue, but apparently the company has now changed its mind.
Apple fixed the issue in the 3.1.2 version of its Safari browser for Windows, which was released Thursday afternoon. This update addresses a total of four security issues in Safari, including bugs in the way Safari renders JavaScript arrays and handles the downloading of executable files.
It also fixes a less-critical issue in the way Safari renders Bitmap and Gif images, which could give attackers a peek at the memory of a victim's computer, Apple said.
Thursday's update was for Windows computers only, and Apple has not yet released a 3.1.2 Safari update for the Mac.
Copyright © 2008 IDG News Service. All rights reserved. IDG News Service is a trademark of International Data Group, Inc.
The Intelligent Enterprise
Mobility is Growing: Survey Shows Why CIOs are Concerned
The Move Toward Mobilization
Protecting the Code: Technology Escrows Safeguards Critical Software
Optimizing Infrastructure Control
Effective Security with a Continuous Approach to ISO 27001 Compliance
Optimizing Wide-Area Data Services Webcast
Why CIOs should embrace Web 2.0
Dashboard Strategies for Business Users
Grassroots Data Governance with SAP MDM
Building Competitive Advantage with Next-Generation Wireless Infrastructure
Raising the Bar on Business Service Delivery: Best Practices in Application Performance
Resource Alerts
Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.
Cisco gets social with Entertainment OS
OQO launches handheld PC with OLED touch screen
Hack Forces Twitter Into 'Full Security Review'
Clearwire woes hit big backers
Myspace comes to TV with Intel, Yahoo
New SD standard will allow for 2TB cards
Social networks link terrorists
Social networking, ROI, pricing among '09 CRM trends
Cutting costs, Microsoft backs away from office space
Sun buys cloud-computing vendor Q-layer
Just the basics, please. Sometimes we all need a refresher or we need to make sure our team and our colleagues are all on the same page.
Over 25 tutorials on everything from business intelligence to virtualization.
- CIO|
- Computerworld|
- CSO|
- DEMO|
- Game Pro|
- Games.net|
- IDG|
- IDG UK|
- IDG Connect|
- IDG Tech Network |
- IDG World Expo|
- Industry Standard|
- InfoWorld|
- ITworld|
- JavaWorld|
- LinuxWorld|
- MacUser|
- Macworld|
- Network World|
- PC World|
- Playlist|
- CIO UK|
- CIO Germany|
- CIO China|
- CIO Sweden|
- CIO Australia|
- Other CIO Sites
