← Database

CVE-2007-4848

MEDIUM CVSS: 4.3 Published: 2007-09-12 Modified: 2026-06-16

Description

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.

Affected Platforms

Microsoft IeMicrosoft Internet Explorer

Weakness Type

NVD-CWE-Other

References