The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
                
            References
                    | Link | Resource | 
|---|---|
| http://w2spconf.com/2010/papers/p26.pdf | Exploit | 
| http://w2spconf.com/2010/papers/p26.pdf | Exploit | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:22
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://w2spconf.com/2010/papers/p26.pdf - Exploit | 
Information
                Published : 2011-12-07 19:55
Updated : 2025-04-11 00:51
NVD link : CVE-2010-5071
Mitre link : CVE-2010-5071
CVE.ORG link : CVE-2010-5071
JSON object : View
Products Affected
                microsoft
- internet_explorer
- ie
CWE
                
                    
                        
                        CWE-264
                        
            Permissions, Privileges, and Access Controls
