medium4.3
CVE-2007-4848
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the…
Impact
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Versions 4.x, 5.0, 5.0_ta3, 5.x, 6.0 |
| Microsoft | Internet Explorer | Versions 4.0, 4.0.1, 4.1, 4.5, 5, 5.0 |