CVE-2009-1718
WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page.
Date published : 2009-06-10
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html