
One of the most widely used and cherished web browsers, Apple Safari has now been detected with a security hole, that would allow attackers to siphon off personal information of the users and is based on the browser’s ‘AutoFill’ feature. As per the security warning issued by Jeremiah Grossman, founder of WhiteHat security, Safari browser’s AutoFill can be attacked and exploited with the help of a malicious web form, that a users fills with the AutoFill, that includes the name, address and e-mail address of the users from the Apple Address Book.
This concern is said to be a major threat and exists on nearly all browsers, that are based on open source WebKit engine and the Safari browser that in Apple Mac OS X and iOS is open to such attacks, along with Google Chrome browser as well. It has also been found that, this security flaw is most active on Safari browsers, when used in Mac OS X, and as numerous users prefer to use different browsers as alternates, hence, the impact if the flaw could be minimal. One of the most worrying aspect of this concern is that, the malicious web form will be filled by AutoFill, even if the user hasn’t ever visited that web page. This creates a significant security breach of the user’s privacy and personal information.
Via PC World
Posted by Rajeev Saxena on July 23, 2010 in Business, Internet and New Media · 0 Comment