5.8
CVSSv2

CVE-2012-3689

Published: 25/07/2012 Updated: 30/07/2012
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

WebKit in Apple Safari prior to 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote malicious users to bypass the Same Origin Policy via a crafted web site.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 4.0.3

apple safari 3.2.1

apple safari 5.0.4

apple safari 3.2.1b

apple safari 3.0

apple safari 3.0.2

apple safari 3.0.3

apple safari 2.0

apple safari 1.3

apple safari 1.3.1

apple safari 4.0.5

apple safari 1.1

apple safari 2.0.3

apple safari 4.1

apple safari 1.3.2

apple safari 1.0.2

apple safari 1.0.1

apple safari 1.0.0b2

apple safari 1.0.0b1

apple safari 3.0.1b

apple safari 3.0.2b

apple safari 5.0.6

apple safari 5.1.3

apple safari 3.1.2b

apple safari 4.0.0b

apple safari 3

apple safari 4.0.1

apple safari 3.0.1

apple safari 2.0.1

apple safari 1.2.3

apple safari 1.2.5

apple safari 4.0.2

apple safari 1.0

apple safari 5.1.1

apple safari 1.0.3

apple safari 5.0.5

apple safari 4.1.1

apple safari 1.2.0

apple safari 1.0b1

apple safari 3.0.0b

apple safari 3.0.3b

apple safari 3.0.4

apple safari 3.1.0b

apple safari 3.0.4b

apple safari

apple safari 5.1.4

apple safari 3.2.2b

apple safari 3.2.2

apple safari 3.2.0

apple safari 5.0

apple safari 3.1.2

apple safari 1.2

apple safari 1.2.1

apple safari 4.0.4

apple safari 3.1.1

apple safari 5.0.1

apple safari 5.0.2

apple safari 4.1.2

apple safari 2

apple safari 1.0.0

apple safari 3.0.0

apple safari 2.0.4

apple safari 2.0.0

apple safari 3.1.0

apple safari 5.1.2

apple safari 3.2.0b

apple safari 3.1.1b

apple safari 1.1.1

apple safari 4.0

apple safari 2.0.2

apple safari 1.2.2

apple safari 1.2.4

apple safari 1.3.0

apple safari 1.1.0

apple safari 5.1

apple safari 5.1.5

apple safari 5.1.6