CVE-2010-5069

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Dec 7, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-50705.0The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getCompCVE-2010-50715.0The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the oCVE-2010-50725.0The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedCVE-2010-50735.0The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComCVE-2010-50744.3The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unCVE-2010-50752.1Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memoryCVE-2010-50764.3QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might aCVE-2010-50777.8server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cauCVE-2010-50785.0SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, whCVE-2010-50795.0SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for (1) the CSRF protection mechanism, (2) CVE-2010-50806.8The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while chCVE-2010-50819.3Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .p
CVE-2010-5069: Medium severity, CVSS 4.3 | Vulnix