CVE-2010-1388

Name of the Vulnerable Software and Affected Versions Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 Safari versions prior to 4.1 on Mac OS X 10.4

Description The issue arises from improper handling of clipboard operations for URLs, specifically drag and paste actions, allowing user-assisted remote attackers to read arbitrary files via a crafted HTML document.

Recommendations For Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6, update to version 5.0 or later to resolve the issue. For Safari versions prior to 4.1 on Mac OS X 10.4, update to version 4.1 or later to resolve the issue.