"Windows users who visit a booby-trapped site with Safari could be forced to download and execute malicious files with no prompting, the 'blended threat' is a result of the default download location in Safari and the way the Windows desktop handles executable files.Even though the main warning is for the Windows version, security experts believe the "carpet bombing" issue could occur on Apple's own operating system.
Source Article
