CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

Score

CVSS 2.0 4.3 Medium

Status

Modified - product-security@apple.com

Published

2010-03-15

Last modified

2024-08-07

Weaknesses

CWE-16

Affected products

• Safari (Apple)

References

• http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
• http://osvdb.org/62937
• http://support.apple.com/kb/HT4070
• http://www.securityfocus.com/bid/38671
• http://www.securityfocus.com/bid/38675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56830
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051