Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 00:36
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://osvdb.org/37638 - | |
| References | () http://xs-sniper.com/blog/2007/07/20/more-uri-stuff-ies-resouce-uri/ - Exploit | 
Information
                Published : 2007-09-12 20:17
Updated : 2025-04-09 00:30
NVD link : CVE-2007-4848
Mitre link : CVE-2007-4848
CVE.ORG link : CVE-2007-4848
JSON object : View
Products Affected
                microsoft
- internet_explorer
- ie
CWE
                