The host is installed with Apple Safari before 6.0 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle drag-and-drop events. Successful exploitation could allow attackers to obtain sensitive information about full pathnames.