Description
Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a downloaded document.
References
- APPLE-SA-2012-09-19-3 vendor-advisory
- 85652 vdb-entry
- 55624 vdb-entry
- http://support.apple.com/kb/HT5502
- apple-safari-cve20123713(78679) vdb-entry