← Database

CVE-2010-0488

MEDIUM CVSS: 6.5 Published: 2010-03-31 Modified: 2026-06-16

Description

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."

Affected Platforms

Microsoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows Server 2008Microsoft Windows Server 2003Microsoft Windows 2000Microsoft Windows VistaMicrosoft Windows 2003 Server

Weakness Type

CWE-200, CWE-732

References