Unscored CVE-2010-1388 EUVD-2010-1416GHSA-p77w-66w2-c2p9

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) dr…

Published Jun 11, 2010 · Updated Aug 7, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs, which allows user-assisted remote attackers to read arbitrary files via a crafted HTML document.

References

43068 third-party-advisory
ADV-2011-0212 vdb-entry
APPLE-SA-2010-06-07-1 vendor-advisory
40105 third-party-advisory
40752 vdb-entry
ADV-2010-1373 vdb-entry
SUSE-SR:2011:002 vendor-advisory
40620 vdb-entry
1024067 vdb-entry
http://support.apple.com/kb/HT4196