CVEvulnerability
CVE-2011-0159
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie.
Affected configurations
• apple iphone os 4.0
• apple iphone os 4.1
• apple iphone os 4.2
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html Vendor Advisory
- http://support.apple.com/kb/HT4564 Vendor Advisory
- http://www.securityfocus.com/bid/46810 www.securityfocus.com
- http://www.securitytracker.com/id?1025182 www.securitytracker.com
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html Vendor Advisory
- http://support.apple.com/kb/HT4564 Vendor Advisory
- http://www.securityfocus.com/bid/46810 www.securityfocus.com
- http://www.securitytracker.com/id?1025182 www.securitytracker.com