medium4.3
CVE-2012-3690
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a craf…
Impact
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 5.1.7 Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1 |