Collected research

Safari pwns Internet Explorer

Aviv Raff On .NET - Safari pwns Internet Explorer

Aviv Raff · aviv.raffon.net

Chains Nitesh Dhanjani's Safari-for-Windows Carpet Bomb — silent drive-by download of arbitrary files to the desktop, which Apple declined to treat as a bug — with an older unpatched IE file-loading flaw to reach code execution on Windows. Microsoft issued advisory 953818; details withheld pending a patch. Changing Safari's download folder is explicitly not sufficient.

Record

Document

Aviv Raff On .NET - Safari pwns Internet Explorer

Researcher

Aviv Raff

Published by

aviv.raffon.net

Topic

Browser

In the archive

• Collected in the 2008 research round

Tags

• attack-chain
• rce
• vendor-advisory
• mitigation
• case-study

This page is the archive's own catalogue record. The research is the work of Aviv Raff, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.