Description
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
References (3)
Core 3
Core References
Exploit x_refsource_misc
http://w2spconf.com/2010/papers/p26.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71817
Issue Tracking x_refsource_misc
http://bugzilla.mozilla.org/show_bug.cgi?id=147777
Scores
EPSS
0.1442
EPSS Percentile
96.2%
Details
CWE
CWE-200
Status
published
Products (43)
microsoft/ie
7.0.6000.16711
microsoft/ie
8.0.7600.16385
microsoft/ie
8.0b
microsoft/internet_explorer
3.0
microsoft/internet_explorer
3.0.1
microsoft/internet_explorer
3.0.2
microsoft/internet_explorer
3.1
microsoft/internet_explorer
3.2
microsoft/internet_explorer
4.0
microsoft/internet_explorer
4.0.1 (3 CPE variants)
... and 33 more
Published
Dec 07, 2011
Tracked Since
Feb 18, 2026