CVE-2010-0044

medium

Description

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051

https://exchange.xforce.ibmcloud.com/vulnerabilities/56830

http://www.securityfocus.com/bid/38675

http://www.securityfocus.com/bid/38671

http://support.apple.com/kb/HT4070

http://osvdb.org/62937

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Details

Source: Mitre, NVD

Published: 2010-03-15

Updated: 2017-09-19

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N