> Begin forwarded message: > > >> > >> A severe security problem has been isolated in the Internet Explorer > >> and Safari browsers for the Apple Macintosh; this flaw does not affect > >> users of Internet Explorer for Windows. The problem has been confirmed > >> on MacOSX using Safari 1.2.1 (v125.1) and Internet Explorer 5.2. These > >> are the latest versions of both browsers, so the problem must be > >> considered present in earlier releases of both browsers. > >> > >> The weakness could allow malicious people to place programs known as > >> scripts on to an affected machine. These scripts could be used to move > >> or delete files without the user's knowledge. The problem appears to > >> be associated with the DMG (disk image) files used as installers for > >> Mac programs. > >> > >> As yet there are no permanent fixes for the problem, but a > >> work-around does exist for Safari users. Start Safari and go to the > >> [Safari] menu and choose [Preferences...], a new window opens. Make > >> sure the [General] tab at the top of the window is selected, now > >> uncheck the box labelled [Open "safe" files after download]. Close the > >> window for the setting to take effect. > >> > >> As a further protection, be careful when downloading disk image files > >> - only get them from reputable sites. > >> > >> In particular, beware of any files offering patches or upgrades to > >> your computer's operating system. Apple never distributes such files > >> through email and never makes them available on other Web sites. You > >> can always obtain Apple software patches and upgrades from the Apple > >> Web site (listed below), or through Software Update - which is > >> accessed through the System Preferences item in your Dock or via the > >> [Apple] menu at the top of the screen. > >
