Description
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.
References
- oval:org.mitre.oval:def:14253 vdb-entry signature
- http://w2spconf.com/2010/papers/p26.pdf