Unscored severity · published Aug 4, 2009
CVE-2009-2198
Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users
–
CVSS
1.5%
EPSS
No
On KEV
Description
Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Garageband · Apple
through 5.0.2; 4.1.1; 4.1.2; 5.0; 5.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2198
Patch
http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html
osvdb.org
http://osvdb.org/56738
Vendor Advisory
http://secunia.com/advisories/36114
Vendor Advisory
http://support.apple.com/kb/HT3732
Patch
http://www.securityfocus.com/bid/35926
www.securitytracker.com
http://www.securitytracker.com/id?1022649
More from Garageband
8.8
CVE-2017-2372
An issue was discovered in certain Apple products
7.8
CVE-2024-44142
The issue was addressed with improved bounds checks
7.8
CVE-2023-42867
This issue was addressed with improved validation of the process entitlement and Team ID
7.8
CVE-2024-23300
A use-after-free issue was addressed with improved memory management
7.8
CVE-2022-22664
An out-of-bounds read was addressed with improved bounds checking