CVE-2010-1834

Publication date

2010-11-15 22:00:00

Family

apple

State

PUBLISHED

Description

CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address.