CVE-2010-0488
No fix known EPSS 29%CVSS 6.5
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."
Products: microsoft internet_explorer, microsoft windows_2003_server, microsoft windows_server_2003, microsoft windows_xp, microsoft windows_server_2008, microsoft windows_vista, microsoft windows_2000