Unscored CVE-2012-3694 EUVD-2012-3641GHSA-hc6p-h2f4-m5h5

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sens…

Published Jul 25, 2012 · Updated Sep 17, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.

References

APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400