CVE-2010-3330

Published Oct 13, 2010 CVSS 3.1 · 6.5 Medium EPSS 22.3% KEV · Not listed
Description
Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Jan 21, 2025, 5:29 PM
Reserved
Sep 14, 2010, 12:00 AM
Status
Modified
Published
Oct 13, 2010, 7:00 PM
Modified
Jun 16, 2026, 11:22 PM