CVE-2014-1369
WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - product-security@apple.com
- Published
- 2014-07-01
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html
- http://www.securitytracker.com/id/1030495
