CVE-2007-4848

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.

🔗 References (4)

• cve@mitrehttp://osvdb.org/37638
• cve@mitrehttp://xs-sniper.com/blog/2007/07/20/more-uri-stuff-ies-resouce-uri/
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/37638
• af854a3a-2127-422b-91ae-364da2661108http://xs-sniper.com/blog/2007/07/20/more-uri-stuff-ies-resouce-uri/