

Last month, Apple made it even plainer that it had stopped supporting Snow Leopard, patching 33 vulnerabilities in Lion, Mountain Lion and Mavericks, but fixing none of the same flaws in Snow Leopard.
Adobe flash safari 5.1.10 update#
Tuesday's Safari update was the second since December that omitted patches for Safari 5.1.10, Apple's most-current browser for OS X 10.6 Snow Leopard, the 2009 operating system that Apple has stopped supporting with security fixes.Īpple delivered the final security update for Snow Leopard in September 2013. The bug patched in WebKit - and thus in Safari - was one of several used by Vupen to exploit Chrome. Vupen hacked several targets, including Chrome, Adobe Reader and Adobe Flash, and Microsoft's Internet Explorer, taking home $400,000 of the total contest payout of $850,000. Of the others, more than half were reported by the Google Chrome security team, which still works on WebKit, even though Google's browser has switched to a different fork, dubbed "Blink," for its foundation.Īnother was attributed to French vulnerability seller Vupen, which also sent a team to Pwn2Own.
Adobe flash safari 5.1.10 code#
Apple patched 27 vulnerabilities in Safari 6 and Safari 7, all in WebKit, the open-source browser engine that powers Safari, and all but one considered critical in that they could allow, the company said, "arbitrary code execution," Apple's terminology for the most serious bugs.Īmong the 27 was the one used by "Keen Team," a Shanghai-based group of security researchers who hacked Safari on the second day of this year's Pwn2Own, held March 12-13 at the CanSecWest security conference in Vancouver, British Columbia.
