Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Apple GarageBand < 5.1 Information Disclosure

Medium

Synopsis

The remote host is vulnerable to an information disclosure vulnerability.

Description

The remote host is running Apple GarageBand, an application used to created music. The installed version of GarageBand is earlier than 5.1. Such versions potentially are affected by an issue caused by GarageBand changing the Apple Safari browser's preferences to cause the browser to accept cookies from third party sites. An attacker could exploit this to obtain sensitive information and track a user's web activities.

Solution

Upgrade to Apple GarageBand 5.1 or later.