PT-2010-3478 · Invisible Hand+1 · Invisible Hand+1

Publicado 2010-05-07 · Atualizado 2021-07-23 · CVE-2010-1852

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer (affected versions not specified)

Description The issue concerns a "cross-site data leakage" problem where Microsoft Internet Explorer, with the Invisible Hand extension enabled, handles cookies during background HTTP requests in an unexpected way. This might allow remote web servers to identify specific individuals and their product searches through HTTP request logging.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-1852

Produtos afetados

Invisible Hand

Internet Explorer

Referências · 2

• http://cnet.com/8301-31361_1-20004265-254.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1852 · Nota de Segurança