CVE-2012-3689

CVE-2012-3689 affects WebKit in Apple Safari prior to 6.0. The issue arises from improper handling of drag-and-drop events, which can allow user‑assisted remote attackers to bypass the Same Origin Policy via a crafted web site. The available connected sources confirm the affected software (Apple ...