Vulnerability in Apple Safari
CVE-2010-0044
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Safari — versions 4.0, 4.0.2, 4.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (x_refsource_OSVDB, vdb-entry)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (Patch, vdb-entry, x_refsource_BID)
- product-security@apple.com (Patch, vdb-entry, x_refsource_BID)
- product-security@apple.com (vdb-entry, x_refsource_XF)
- product-security@apple.com (x_refsource_OVAL, signature, vdb-entry)