Krystian Kloskowski has discovered a vulnerability in Apple Safari, which can be exploited by malicious people to conduct spoofing attacks.

The vulnerability is caused due to an error when processing the "setInterval()" function and can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar.

The vulnerability is confirmed in version 5.0.5 (7533.21.1). Other versions may also be affected.

Solution
Update to version 5.1.2 (7534.52.7), which somewhat addresses the vulnerability.

Provided and/or discovered by
Krystian Kloskowski (h07) via Secunia.

Deep Links
Links available to Secunia VIM customers