high7.1
CVE-2012-3697
WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary…
Impact
WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 5.1.7 Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1 |