CVEvulnerability
CVE-2007-4848
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
Affected configurations
• microsoft ie 4.x
• microsoft ie 5.0
• microsoft ie 5.0 ta3
• microsoft ie 5.x
• microsoft ie 6.0
• microsoft internet explorer 4.0
• microsoft internet explorer 4.0.1
• microsoft internet explorer 4.1
• microsoft internet explorer 4.5
• microsoft internet explorer 5
• microsoft internet explorer 5.0
• microsoft internet explorer 5.0.1
• microsoft internet explorer 5.01
• microsoft internet explorer 5.1
• microsoft internet explorer 5.2.3
• microsoft internet explorer 5.5
• microsoft internet explorer 6
• microsoft internet explorer 6.0
• microsoft internet explorer 6.0.2600
• microsoft internet explorer 6.0.2800
• microsoft internet explorer 6.0.2800.1106
• microsoft internet explorer 6.0.2900
• microsoft internet explorer 6.0.2900.2180
• microsoft internet explorer 7
• microsoft internet explorer 7.0
• microsoft internet explorer 7.0.5730.11