CVE-2010-5071

2022-10-0316:21:02

mitre

www.cve.org

javascript

microsoft

internet explorer

6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.8%

JSON

The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

References

w2spconf.com/2010/papers/p26.pdf