KLA10075
Multiple vulnerabilities in Apple Safari

Multiple critical vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, inject code, bypass security restrictions, spoof user interfaces or read local files. Below is a complete list of vulnerabilities

1. Unknown vectors can be exploited via a specially designed web site;
2. Improper handling of autocomoplete can be exploited remotely by leveraging workstations;
3. Uninitialized memory access can be exploited remotely via a specially designed web site;
4. Incomplete blacklists can be exploited remotely via homoglyphs;
5. Improper drag-n-drop handling can be exploited remotely via a specially designed web-site;
6. Improper CSS handling can be exploited remotely via a specially designed web site;
7. CRLF injections can be exploited remotely via a specially designed web site;
8. Improper ‚file:‘ URL handling can be exploited remotely via a WebProcess compromise;
9. XSS can be exploited remotely via a specially designed web site or ‚feed:‘ URL;
10. Unknown vectors can be exploited remotely via ‚feed:‘ URLs.

Apple Safari versions 5.1.7 and earlier

5.1.7 became latest version for windows, still containing this vulnerabilities. You can choose another browser to use.

Apple mailing list
Apple safari 5.1.8