Unscored CVE-2012-3690 EUVD-2012-3637GHSA-xqjj-ffgq-m3mf

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitr…

Published Jul 25, 2012 · Updated Sep 16, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.

References

APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400