Description
WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site.
References
- 1030495 vdb-entry
- APPLE-SA-2014-06-30-1 vendor-advisory