CVE

Id
6817  
CVE No.
CVE-2002-2435  
Status
Candidate  
Description
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.  
Phase
Assigned (20111207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
38608 6817 CVE-2002-2435 MISC:http://bugzilla.mozilla.org/show_bug.cgi?id=147777  View
38609 6817 CVE-2002-2435 MISC:http://w2spconf.com/2010/papers/p26.pdf  View
38610 6817 CVE-2002-2435 XF:ms-ie-css-info-disc(71817)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33063 JVNDB-2011-003303 Microsoft Internet Explorer の CSS 実装における重要な情報を取得される脆弱性 Microsoft Internet Explorer の Cascading Style Sheets (CSS) 実装は、:visited pseudo-class を適切に処理しないため、訪問履歴のある Web ページについての重要な情報を取得される脆弱性が存在します。 CVE-2002-2435 6817 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003303.html  View