Unscored CVE-2012-3689 EUVD-2012-3636GHSA-xmwc-2xfr-rrcr

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the …

Published Jul 25, 2012 · Updated Sep 17, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site.

References

APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400