Developer demonstrates Dashboard exploit
A developer has demonstrated a Dashboard exploit in Mac OS X 10.4 Tiger that a malicious Web site owner could use to install widgets you might not want on your Mac.
Writing under the name of Stephan.com, the developer said that a combination of Apple's lack of documentation for removing widgets, Safari's download controls, and a widget feature all make it possible for the bad guys to use Dashboard to take you to any Web site of their choosing, hijacking Dashboard for their nefarious purposes.
By Bryan Chaffin at MacNewsWorld.
[ Read more ]
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.