CVE-2010-0652

Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet…

published February 18, 2010

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04949 · 92.1th percentile
Published
2010-02-18T17:19Z
EPSS history
Timeline
  • 18 FEB 17:19Z
    Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet…
    cvelistv5