CVE-2010-0044
First published: Fri Mar 12 2010(Updated: )
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Safari | =4.0.2 | |
| Safari | =4.0.1 | |
| Safari | <=4.0.4 | |
| Safari | =4.0.3 | |
| Safari | =4.0 | |
| Safari | =4.0.0b | |
| <=4.0.4 | ||
| =4.0 | ||
| =4.0.0b | ||
| =4.0.1 | ||
| =4.0.2 | ||
| =4.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
- http://www.securityfocus.com/bid/38671
- http://support.apple.com/kb/HT4070
- http://www.securityfocus.com/bid/38675
- http://osvdb.org/62937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56830
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051
Frequently Asked Questions
What is the severity of CVE-2010-0044?
CVE-2010-0044 has a medium severity rating, indicating potential risks to user privacy.
How do I fix CVE-2010-0044?
To fix CVE-2010-0044, update Apple Safari to version 4.0.5 or later.
What versions of Safari are affected by CVE-2010-0044?
CVE-2010-0044 affects Apple Safari versions 4.0.4 and earlier, including 4.0.0b through 4.0.3.
What is the impact of CVE-2010-0044 on users?
CVE-2010-0044 may allow remote web servers to track users through cookies set in RSS or Atom feeds.
Is CVE-2010-0044 a common vulnerability?
CVE-2010-0044 is a known vulnerability that has been addressed in updates, but it is less common due to the age of the affected software.
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/apple
- canonical/safari
- version/safari/4.0.2
- version/safari/4.0.1
- version/safari/4.0.4
- version/safari/4.0.3
- version/safari/4.0
- version/safari/4.0.0b