The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
References
Link | Resource |
---|---|
http://w2spconf.com/2010/papers/p26.pdf | Exploit |
Configurations
Information
Published : 2011-12-07 11:55
Updated : 2012-03-07 21:00
NVD link : CVE-2010-5068
Mitre link : CVE-2010-5068
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
opera
- opera_browser