CVE-2011-0166

CVE-2011-0166 describes a vulnerability in Apple Safari versions prior to 5.0.4, specifically within the WebKit HTML5 drag and drop functionality. This flaw allows a user-assisted remote attacker to bypass the Same Origin Policy, potentially leading to the disclosure of sensitive information. With a CVSS score of 5.8, it is considered a medium-severity vulnerability, requiring user interaction (AC:M) but not authentication (Au:N) for a network-based attack (AV:N) that primarily impacts confidentiality (C:P) and integrity (I:P). There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage, suggesting it is not widely targeted.