CVEvulnerability
CVE-2010-0044
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-16
Description
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
Affected configurations
• apple safari (<= 4.0.4)
• apple safari 4.0
• apple safari 4.0.0b
• apple safari 4.0.1
• apple safari 4.0.2
• apple safari 4.0.3
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html Vendor Advisory
- http://osvdb.org/62937 osvdb.org
- http://support.apple.com/kb/HT4070 Vendor Advisory
- http://www.securityfocus.com/bid/38671 Patch
- http://www.securityfocus.com/bid/38675 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56830 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051 oval.cisecurity.org
- http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html Vendor Advisory
- http://osvdb.org/62937 osvdb.org
- http://support.apple.com/kb/HT4070 Vendor Advisory
- http://www.securityfocus.com/bid/38671 Patch
- http://www.securityfocus.com/bid/38675 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56830 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051 oval.cisecurity.org