Description: Matan Gillon has discovered a vulnerability in Microsoft Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.
The vulnerability is caused due to an error where the content of imported CSS (Cascading Style Sheets) from other domains is not properly protected from being read via the "cssText" DHTML property.
This can be exploited by a malicious web site to disclose parts of the contents of certain documents served from another web site (e.g. HTML documents with a certain structure, which can be parsed by the internal CSS parser) by loading the document via the "@import" directive and accessing the content of it via JavaScript.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
