PT-2012-2748 · Apple · Safari

Nshah · Published 2012-03-12 · Updated 2018-01-06 · CVE-2012-0640

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.1.4

Description The issue is related to the improper implementation of cookie blocking in WebKit, which allows remote web servers to track users via a cookie. This affects the "From third parties and advertisers" cookie blocking feature.

Recommendations For versions prior to 5.1.4, update to version 5.1.4 or later to resolve the issue. As a temporary workaround, consider restricting or disabling third-party cookie access until the update is applied.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-0640

Affected Products

Safari

References · 8

• https://cve.org/CVERecord?id=CVE-2012-0640 · Security Note
• https://ubuntu.com/security/CVE-2012-0640 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0640 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-0640 · Vendor Advisory
• http://securitytracker.com/id?1026785 · Note
• http://support.apple.com/kb/HT5190 · Note
• http://secunia.com/advisories/48377 · Note