medium4.3
CVE-2002-2435
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows…
Impact
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Versions 7.0.6000.16711, 8.0.7600.16385, 8.0b |
| Microsoft | Internet Explorer | through 8 Versions 3.0, 3.0.1, 3.0.2, 3.1, 3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugzilla.mozilla.org/show_bug.cgi?id=147777
- http://w2spconf.com/2010/papers/p26.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71817
- http://bugzilla.mozilla.org/show_bug.cgi?id=147777
- http://w2spconf.com/2010/papers/p26.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71817