Information disclosure in Microsoft Internet Explorer
CVE-2012-6502
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \\127.0.0.1\C$\ sequence.
Vulnerability class: Information Disclosure
EPSS: 0.101 (95.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 6, 7, 7.0.5730
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)