US-CERT uncovers JavaScript security vulnerability in Safari
The United States Computer Emergency Readiness Team (US-CERT) has found a security hole in Safari, with which a hacker could run arbitrary code at the privilege level of the current user account if the victim visits a malicious Web page.
http://reviews.cnet.com/8301-13727_7-20004709-263.html?part=rss&tag=feed&subj=MacFixIt