Latest Apple Safari can let dangerous malware onto user's PC

As found some security researchers, the latest version of Apple's Safari browser contains a critical vulnerability that enables attackers to install malware on end user machines. 

The vulnerability was discovered by Polish researcher Krystian Koskowski, who shared this proof-of-concept. Vulnerability tracking service Secunia rated the vulnerability "highly critical," the second-highest rating on its five-tier severity scale.

 The vulnerability could also be exploited using booby-trapped email that's read using Safari.  It has been confirmed in version 4.0.5 for Windows, and the latest Mac version may also be affected.

Apple was not reached for comments over these findings. Until a patch is released, the threat can be reduced by disabling javascript, CERT reported. This can be accomplished by opening Safari preferences, choosing the Security tap and unchecking the box that says "enable javascript."