Apple Safari Upgrades to Version 3.1.1 (Direct Download Links)

Apple Safari web browser has been upgraded to version 3.1.1 for both Mac OS X and Windows. Safari 3.1.1 includes improvements to stability, compatibility and security, and Apple recommends the update to all Safari users.

An Apple support article about the security content of Safari 3.1.1 describes the fixes that been made to patch security vulnerabilities in Safari browser.

In Safari for Windows XP or Vista, version 3.1.1 update fixes loophole that allow a maliciously crafted website may control the contents of the address bar and a bug that allows exploit when visiting a maliciously crafted website that may lead to an unexpected application termination or arbitrary code execution

There are also fixes that affect Safari for both Mac OS X and Windows XP or Vista, including visiting a malicious website may result in cross-site scripting which caused by WebKit’s handling of URLs containing a colon character in the host name. Another issue is viewing a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution caused by heap buffer overflow exists in WebKit’s handling of JavaScript regular expressions, which may be triggered via JavaScript when processing regular expressions with large, nested repetition counts.

Apple Software Update will prompt Safari 3.1 users to download and install Safari 3.1.1, or the standalone update package can be download with direct download links below or Apple download center.

Safari 3.1.1 for Windows XP and Vista: SafariSetup.exe
Safari 3.1.1 + Quicktime for Windows XP and Vista: SafariQuickTimeSetup.exe

SHA1 hash value for the Safari 3.1.1 setup executable can be found here.

Apple Safari 4 Final