medium5.8
CVE-2012-3689
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy v…
Impact
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 5.1.7 Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1 |