The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| http://w2spconf.com/2010/papers/p26.pdf |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T23:31:42.872Z
Reserved: 2011-12-07T00:00:00Z
Link: CVE-2010-5071
No data.
Status : Deferred
Published: 2011-12-07T19:55:01.470
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-5071
No data.
OpenCVE Enrichment
No data.
Weaknesses