Security feature bypass

2011-12-0719:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

CPENameOperatorVersion
ieeq8.0.7600.16385
ieeq8.0.98
ieeq7.0.6000.16711
internet_explorerle8
internet_explorereq5
internet_explorereq6 sp1
internet_explorereq5.1 sp4
internet_explorereq7
internet_explorereq6
internet_explorereq5.01

Name	Operator	Version
ie	eq	8.0.7600.16385
ie	eq	8.0.98
ie	eq	7.0.6000.16711
internet_explorer	le	8
internet_explorer	eq	5
internet_explorer	eq	6 sp1
internet_explorer	eq	5.1 sp4
internet_explorer	eq	7
internet_explorer	eq	6
internet_explorer	eq	5.01

Rows per page:

1-10 of 1011

References

w2spconf.com/2010/papers/p26.pdf