CVE-2010-0044
published 2010-03-15CVE-2010-0044: PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.53%
72.2th percentile
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | <= 4.0.4 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hv89-3xxg-f733: PubSub in Apple Safari before 4
ghsa_unreviewed·2022-05-02
CVE-2010-0044 [MEDIUM] GHSA-hv89-3xxg-f733: PubSub in Apple Safari before 4
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
OSV
CVE-2010-0044: PubSub in Apple Safari before 4
osv·2010-03-15·CVSS 4.3
CVE-2010-0044 [MEDIUM] CVE-2010-0044: PubSub in Apple Safari before 4
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
No detection rules found.
No public exploits indexed.
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.htmlhttp://osvdb.org/62937http://support.apple.com/kb/HT4070http://www.securityfocus.com/bid/38671http://www.securityfocus.com/bid/38675https://exchange.xforce.ibmcloud.com/vulnerabilities/56830https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.htmlhttp://osvdb.org/62937http://support.apple.com/kb/HT4070http://www.securityfocus.com/bid/38671http://www.securityfocus.com/bid/38675https://exchange.xforce.ibmcloud.com/vulnerabilities/56830https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051
2010-03-15
Published