Microsoft has officially responded to the discovery of a “blended threat,” the design of Safari that allows a malicious Web site to download and clutter the user’s download space with a myriad of unwanted files. that is the so-called “Carpet Bomb” effect.

While Microsoft’s shield Response Center is working on the problem with Apple and is not calling it a vulnerability of either Windows or Safari, they have issued a safety measure advisory which provides guidance to Windows customers to restrict their use of Safari until an update is available from either Apple or Microsoft.

Microsoft’s official statement is as chases:

“Microsoft is investigating new public reports of a blended threat that allows remote cipher execution on all supported versions of Windows XP and Windows Vista when Apple’s Safari for Windows has been installed. Safari is not installed with Windows XP or Windows Vista by default: it must be installed independently or through the Apple Software

Microsoft issued protection Advisory (953818) to supply guidance to customers running Safari on the affected platforms to help them protect themselves. Microsoft is actively monitoring that situation to keep customers informed and will supply additional customer guidance as essential. shield Advisory (953818) does not refer to a vulnerability in either Safari or Windows. Rather, it describes a blended threat in which files may be downloaded to a user’s machine without prompting, allowing them to be executed. that results from a combination of the default download location in Safari and how the Windows desktop handles executables. Safari is available as a stand-alone install or through the Apple Software Update application.

At the present date, Microsoft is unaware of any attacks attempting to exploit that blended threat. Upon completion of that review, Microsoft will take the appropriate measures to protect our customers. that may include providing a solution through…

Orginal post by Top Tech News