Vulnerability in Microsoft Ie
CVE-2007-4848
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
EPSS: 0.075 (93.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 4.x, 5.0, 5.0_ta3
- Microsoft Internet_explorer — versions 4.0, 4.0.1, 4.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC)