Lucene search

K
cve[email protected]CVE-2012-3694
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-3694

2022-10-0316:15:22
CWE-200
web.nvd.nist.gov
29
cve-2012-3694
webkit
apple safari
information disclosure
remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.

Affected configurations

NVD
Node
applesafariRange5.1.7
OR
applesafariMatch1.0
OR
applesafariMatch1.0beta
OR
applesafariMatch1.0beta2
OR
applesafariMatch1.0.0
OR
applesafariMatch1.0.0b1
OR
applesafariMatch1.0.0b2
OR
applesafariMatch1.0.1
OR
applesafariMatch1.0.2
OR
applesafariMatch1.0.3
OR
applesafariMatch1.0.385.8
OR
applesafariMatch1.0.385.8.1
OR
applesafariMatch1.0b1-mac
OR
applesafariMatch1.1
OR
applesafariMatch1.1.0
OR
applesafariMatch1.1.1
OR
applesafariMatch1.2
OR
applesafariMatch1.2.0
OR
applesafariMatch1.2.1
OR
applesafariMatch1.2.2
OR
applesafariMatch1.2.3
OR
applesafariMatch1.2.4
OR
applesafariMatch1.2.5
OR
applesafariMatch1.3
OR
applesafariMatch1.3.0
OR
applesafariMatch1.3.1
OR
applesafariMatch1.3.2
OR
applesafariMatch1.3.2312.5
OR
applesafariMatch1.3.2312.6
OR
applesafariMatch2
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.3417.9.3
OR
applesafariMatch2.0.4
OR
applesafariMatch2.0.4-mac
OR
applesafariMatch3
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.0-mac
OR
applesafariMatch3.0.0b
OR
applesafariMatch3.0.0b-windows
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.1-mac
OR
applesafariMatch3.0.1beta
OR
applesafariMatch3.0.1b
OR
applesafariMatch3.0.1b-windows
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.2b
OR
applesafariMatch3.0.2b-windows
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.3-mac
OR
applesafariMatch3.0.3b
OR
applesafariMatch3.0.3b-windows
OR
applesafariMatch3.0.4
OR
applesafariMatch3.0.4-mac
OR
applesafariMatch3.0.4b
OR
applesafariMatch3.0.4b-windows
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.0-mac
OR
applesafariMatch3.1.0b
OR
applesafariMatch3.1.0b-windows
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.1b-windows
OR
applesafariMatch3.1.2
OR
applesafariMatch3.1.2b-windows
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.0b-windows
OR
applesafariMatch3.2.1
OR
applesafariMatch3.2.1b-windows
OR
applesafariMatch3.2.2
OR
applesafariMatch3.2.2b-windows
OR
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
OR
applesafariMatch4.0.3
OR
applesafariMatch4.0.4
OR
applesafariMatch4.0.5
OR
applesafariMatch4.1
OR
applesafariMatch4.1.1
OR
applesafariMatch4.1.2
OR
applesafariMatch5.0
OR
applesafariMatch5.0.1
OR
applesafariMatch5.0.2
OR
applesafariMatch5.0.4
OR
applesafariMatch5.0.5
OR
applesafariMatch5.0.6
OR
applesafariMatch5.1
OR
applesafariMatch5.1.1
OR
applesafariMatch5.1.2
OR
applesafariMatch5.1.3
OR
applesafariMatch5.1.4
OR
applesafariMatch5.1.5
OR
applesafariMatch5.1.6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%