The host is installed with Internet Explorer and is prone to multiple information disclosure vulnerabilities.

Successful exploitation will allow attackers to gain access to sensitive information and launch other attacks. Impact Level: Application

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.

Multiple flaws are due to - The Cascading Style Sheets (CSS) implementation does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. - The JavaScript implementation is not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages.

Internet Explorer Version 8 and prior.

• http://w2spconf.com/2010/papers/p26.pdf
• https://bugzilla.mozilla.org/show_bug.cgi?id=147777

---

Updated on 2015-03-25