CVE-2010-5071 - CVE House

Status published Medium CVE-2010-5071

The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier...

5 CVSS

Vulnerability Description

The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-5071

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

http://w2spconf.com/2010/papers/p26.pdf

More from microsoft

View All →

CVE-2025-25199

BCryptGenerateSymmetricKey memory leak

High 7.5

CVE-2024-47083

Power Platform Terraform Provider has Improper Masking of Secrets in Logs

High 8.8

CVE-2024-0590

Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Medium 6.1

CVE-2023-30846

typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

Critical 9.1

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members...

Medium 4.3

Affected Vendor

microsoft

View all reports →

Affected Software

ie, internet explorer

Vulnerable Versions:

7.0.6000.16711, 8.0.7600.16385, 8.0b, 0, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 4.0, 4.0.1, 4.01, 4.1, 4.5, 4.40.308, 4.40.520, 4.70.1155, 4.70.1158, 4.70.1215, 4.70.1300, 4.71.544, 4.71.1008.3, 4.71.1712.6, 4.72.2106.8, 4.72.3110.8, 4.72.3612.1713, 5, 5.0, 5.0.1, 5.00.0518.10, 5.00.0910.1309, 5.00.2014.0216, 5.00.2314.1003, 5.00.2516.1900, 5.00.2614.3500, 5.00.2919.800, 5.00.2919.3800, 5.00.2919.6307, 5.00.2920.0000, 5.00.3103.1000, 5.00.3105.0106, 5.00.3314.2101, 5.00.3315.1000, 5.00.3502.1000, 5.00.3700.1000, 5.01, 5.1, 5.2.3, 5.5, 5.50.3825.1300, 5.50.4030.2400, 5.50.4134.0100, 5.50.4134.0600, 5.50.4308.2900, 5.50.4522.1800, 5.50.4807.2300, 6, 6.0, 6.00.2462.0000, 6.00.2479.0006, 6.0.2600, 6.00.2600.0000, 6.0.2800, 6.0.2800.1106, 6.00.2800.1106, 6.0.2900, 6.0.2900.2180, 6.00.2900.2180, 6.00.3663.0000, 6.00.3718.0000, 6.00.3790.0000, 6.00.3790.1830, 6.00.3790.3959, 7, 7.0, 7.0.5730, 7.0.5730.11, 7.00.5730.1100, 7.00.6000.16386, 7.00.6000.16441, 8.0.6001

Timeline

Official Publish: December 7th, 2011

Last Modified: September 16th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.