CVE-2012-3690

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site...

CVE-2012-3690

CVE-2012-3690 affects Apple Safari/WebKit prior to 6.0. The root cause is improper handling of drag-and-drop events in WebKit, enabling user-assisted remote attackers to read arbitrary files via a crafted website. No remediation details are provided in the supplied documents.