Apple's Safari browser appears to have a vulnerability in the download mechanism, according to a security researcher.