CVE-2009-2198

Published: Aug 4, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.

Affected (5)

Products: Apple: Garageband

Apple

1 product

Garageband

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Garageband	Up to 5.0.2
Apple Garageband	Version 4.1.1
Apple Garageband	Version 4.1.2
Apple Garageband	Version 5.0.1
Apple Garageband	Version 5.0

Related CWEs

CWE-264

References (16)

http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html

Source: cve@mitre.org

PatchVendor Advisory

http://osvdb.org/56738

Source: cve@mitre.org

http://secunia.com/advisories/36114

Source: cve@mitre.org

Vendor Advisory

http://support.apple.com/kb/HT3732

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/35926

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1022649

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/2141

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/52248

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html