PT-2010-3478 · Invisible Hand+1 · Invisible Hand+1
Published
2010-05-07
·
Updated
2021-07-23
·
CVE-2010-1852
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer (affected versions not specified)
Description
The issue concerns a "cross-site data leakage" problem where Microsoft Internet Explorer, with the Invisible Hand extension enabled, handles cookies during background HTTP requests in an unexpected way. This might allow remote web servers to identify specific individuals and their product searches through HTTP request logging.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Invisible Hand
Internet Explorer