Unscored CVE-2012-3697 EUVD-2012-3644GHSA-726p-9j28-m79m

WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restriction…

Published Jul 25, 2012 · Updated Sep 17, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise.

References

APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400