The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://w2spconf.com/2010/papers/p26.pdf |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-12-07T19:00:00Z
Updated: 2024-09-16T20:27:08.114Z
Reserved: 2011-12-07T00:00:00Z
Link: CVE-2010-5072
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-12-07T19:55:01.517
Modified: 2024-11-21T01:22:26.460
Link: CVE-2010-5072
Redhat
No data.