Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-0683 | Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| http://code.google.com/p/chromium/issues/detail?id=9877 |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-17T04:19:47.946Z
Reserved: 2010-02-18T00:00:00Z
Link: CVE-2010-0652
No data.
Status : Deferred
Published: 2010-02-18T18:00:00.707
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-0652
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD