CVE-2010-0044

EPSS 0.46%
Veröffentlicht 15.03.2010 13:28:25
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 4.0.4

Apple ≫ Safari Version4.0

Apple ≫ Safari Version4.0.0b

Apple ≫ Safari Version4.0.1

Apple ≫ Safari Version4.0.2

Apple ≫ Safari Version4.0.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.614

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Vendor Advisory

http://support.apple.com/kb/HT4070

Vendor Advisory

http://www.securityfocus.com/bid/38671

Patch

http://osvdb.org/62937

http://www.securityfocus.com/bid/38675

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/56830

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051

https://nvd.nist.gov/vuln/detail/CVE-2010-0044

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0044

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0044

EUVD