PT-2010-2404 · Microsoft · Internet Explorer
Published
2010-02-18
·
Updated
2021-07-23
·
CVE-2010-0652
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer (affected versions not specified)
Description
The issue allows remote HTTP servers to obtain sensitive information via a crafted document, taking advantage of Microsoft Internet Explorer's handling of CSS stylesheets. This occurs even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, enabling cross-origin loading.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Internet Explorer