CVE-2010-3325

Microsoft Internet Explorer 6-8 - Info Disclosure

Title source: llm

Description

Microsoft Internet Explorer 6 through 8 does not properly handle unspecified special characters in Cascading Style Sheets (CSS) documents, which allows remote attackers to obtain sensitive information from a different (1) domain or (2) zone via a crafted web site, aka "CSS Special Character Information Disclosure Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED

by Chris Evans · htmldoswindows

https://www.exploit-db.com/exploits/34602

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://support.avaya.com/css/P8/documents/100113324

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA10-285A.html

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7410

Scores

EPSS 0.2169

EPSS Percentile 95.8%

Details

CWE

CWE-200

Status published

Products (3)

microsoft/internet_explorer 6

microsoft/internet_explorer 7

microsoft/internet_explorer 8

Published Oct 13, 2010

Tracked Since Feb 18, 2026