CVE-2012-3697

WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise...

CVE-2012-3697

The CVE-2012-3697 entry concerns WebKit in Apple Safari before 6.0, where improper handling of file: URLs allows a WebProcess compromise to bypass sandbox restrictions and read arbitrary files. Impact is reading local files from remote-triggered WebProcess compromise; the vulnerability affects We...