Safari 3.1.1 is Available

Safari Icon

Apple releases Safari 3.1.1 to address stability, compatibility and Security.

Safari 3.1.1 is available for Mac OS X Tiger, Leopard, and Windows XP/Vista.

About the security content of Safari 3.1.1

Safari 3.1.1

  • Safari
    CVE-ID: CVE-2007-2398
    Available for: Windows XP or Vista
    Impact: A maliciously crafted website may control the contents of the address bar

    Description: A timing issue in Safari 3.1 allows a web page to change the contents of the address bar without loading the contents of the corresponding page. This could be used to spoof the contents of a legitimate site, allowing user credentials or other information to be gathered. This issue was addressed in Safari Beta 3.0.2, but reintroduced in Safari 3.1. This update addresses the issue by restoring the address bar contents if a request for a new web page is terminated. This issue does not affect Mac OS X systems.
  • Safari
    CVE-ID: CVE-2008-1024
    Available for: Windows XP or Vista
    Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

    Description: A memory corruption issue exists in Safari’s file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. This issue does not affect Mac OS X systems.
  • WebKit
    CVE-ID: CVE-2008-1025
    Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
    Impact: Visiting a malicious website may result in cross-site scripting

    Description: An issue exists in WebKi’s handling of URLs containing a colon character in the host name. Opening a maliciously crafted URL may lead to a cross-site scripting attack. This update addresses the issue through improved handling of URLs. Credit to Robert Swiecki of Google Information Security Team and David Bloom for reporting this issue.
  • WebKit
    CVE-ID: CVE-2008-1026
    Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.2, Mac OS X Server v10.5.2, Windows XP or Vista
    Impact: Viewing a maliciously crafted web page may lead to an unexpected application termination or arbitrary code execution

    Description: A heap buffer overflow exists in WebKit’s handling of JavaScript regular expressions. The issue may be triggered via JavaScript when processing regular expressions with large, nested repetition counts. This may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing additional validation of JavaScript regular expressions. Credit to Charlie Miller for reporting these issues.

Safari 3.1.1 can be obtained through Safari Download Page or Apple Software Updates.

Panasonic HDC-SD9: 1080p/24p Video Sample

Since I can now use Final Cut Pro 6 to “Log and Transfer” 1080p/24p clip from my Panasonic HDC-SD9, I will be posting more video sample from this camera.

It was a nice day, so I took a little walk and film some footage using Panasonic HDC-SD9. Check out the video, QuickTime 7 is required for playback.

Prepare for Landing

Video info:

  • Format: H.264, 1920×1080
  • File Size: 16.66 MB
  • Frame Rate: 23.98 FPS
  • Data rate: 8.73 mbits/s
  • Length: 16.01 seconds

Panasonic HDC-SD9 settings:

  • Recording Mode: HA1920
  • 24p Digital Cinema: On
  • Intelligent Contrast: On

Software info:

I will post more videos.

South Park: Season 12 Episode 6 – “Over Logging”

South Park: Season 12 Episode 6 – “Over Logging”
Original Air Date: 2008-04-16

Watch “Over Logging” here (SouthParkStudios.com). Flash Player required.

References:

Note:

  • This episode will be available for streaming from April 17th to April 23rd. It will then be available again starting May 15th 2008. Go to SouthParkStudios.com for more details.
  • All Season 12 episodes will be available uncensored @ iTunes Store and Amazon Unbox.
  • The sixth episode of Season 12
  • South Park Studios are known for working on the episodes to the last minute before they have to air. Looking for an early leak is basically a futile effort.

Continue reading “South Park: Season 12 Episode 6 – “Over Logging””

Panasonic HDC-SD9 and Final Cut Pro: Library and Plugins

Someone requested me to post screenshots of plugins directory for QuickTime and Final Cut Pro; and my System Preferences.

Hope this helps. I now have no problems importing 1080p/24p clip from Panasonic HDC-SD9 using Final Cut Pro 6.0.3 and Perian 1.1 QuickTime Component.

Let me know how it goes.

Panasonic HDC-SD9 and Final Cut Pro: The Setup

Continuing the coverage on Panasonic HDC-SD9 and Final Cut Pro, the followings are the setup I have:

Final Cut Pro 6.0.3

  • Easy Setup
  • Format: Panasonic DVCPRO HD
  • Use: DVCPRO HD 1080pA24

QuickTime Component

  • Perian 1.1

Panasonic HDC-SD9

  • Record Mode: HA1920
  • 24p Digital Cinema: ON

——-

What kind of setup do you have?

Panasonic HDC-SD9: 1080p/24p Video

UPDATE:
I uploaded the whole video, instead of a snippet.

Now that I can import videos from HDC-SD9 in 1080p/24p mode using Final Cut Pro correctly, I’d like to share a brief video clip from this camcorder.

Check out the video quality taken using HDC-SD9, however short it may be. (QuickTime 7 required)

Notes:

  • 1920×1080 resolutions
  • H.264 8.82mbits/s
  • 28.06MB
  • About 1 second length
  • Imported using Final Cut Pro 6.0.3 and Perian 1.1
  • Exported using Compressor 3.0.3
  • On MacBook Pro Core Duo running Mac OS X Leopard 10.5.2

Apparently I posted a Apple Pro Res 422 encoded earlier. It looked great but not many people could play it.

Panasonic HDC-SD9 in Apple Knowledge Base

From Apple Support:

http://support.apple.com/kb/TS1348

Final Cut Pro, Final Cut Express: Unexpected quit with Panasonic HDC-SD9 AVCHD

Symptoms
Final Cut Pro and Final Cut Express may quit unexpectedly when using the Log and Transfer window to preview AVCHD media from a Panasonic HDC-SD9 camcorder.

Products Affected
Final Cut Pro 6.0, Final Cut Express 4.0

Resolution
The Panasonic HDC-SD9 model camcorder is currently not qualified for use with Final Cut Pro or Final Cut Express.  Although some devices that are not qualified may work to some extent with Final Cut Pro and Final Cut Express, in this case the camcorder may not perform as expected.

To find devices qualified for use with Final Cut Pro and Final Cut Express, refer to Qualified Devices for Apple Pro Applications.

Additional Information
This camcorder’s implementation of AVCHD video uses a format of H.264 that employs “Br-frames”, which are similar to traditional MPEG-4 B-frames, but contain motion reference information. The Final Cut Pro and Final Cut Express components that preview AVCHD media currently do not recognize or handle Br-frames in AVCHD data.

Up to this point, Panasonic HDC-SD9 is not yet supported in Final Cut Pro and Final Cut Express by Apple.