Unscored CVE-2002-2435 EUVD-2002-2413GHSA-fxv5-cqrh-qvhc

The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo…

Published Dec 7, 2011 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.

References

http://w2spconf.com/2010/papers/p26.pdf
ms-ie-css-info-disc(71817) vdb-entry
http://bugzilla.mozilla.org/show_bug.cgi?id=147777