CVE-2010-0044

EPSS 0.46%
Published 15.03.2010 13:28:25
Last modified 11.04.2025 00:51:21
Source product-security@apple.com
Teams watchlist Login
Open Login

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 4.0.4

Apple ≫ Safari Version4.0

Apple ≫ Safari Version4.0.0b

Apple ≫ Safari Version4.0.1

Apple ≫ Safari Version4.0.2

Apple ≫ Safari Version4.0.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.46%	0.614

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Vendor Advisory

http://support.apple.com/kb/HT4070

Vendor Advisory

http://www.securityfocus.com/bid/38671

Patch

http://osvdb.org/62937

http://www.securityfocus.com/bid/38675

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/56830

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051

https://nvd.nist.gov/vuln/detail/CVE-2010-0044

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0044

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0044

EUVD