4.3

CVE-2007-4848

Exploit
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Ie Version 4.x
Microsoft ≫ Ie Version 5.0 Update sp1
Microsoft ≫ Ie Version 5.0 Update sp4
Microsoft ≫ Ie Version 5.0_ta3
Microsoft ≫ Ie Version 5.x
Microsoft ≫ Ie Version 6.0 Update sp1
Microsoft ≫ Ie Version 6.0 Update sp2
Microsoft ≫ Internet Explorer Version 4.0
Microsoft ≫ Internet Explorer Version 4.0.1
Microsoft ≫ Internet Explorer Version 4.1
Microsoft ≫ Internet Explorer Version 4.5
Microsoft ≫ Internet Explorer Version 5.0
Microsoft ≫ Internet Explorer Version 5.0.1
Microsoft ≫ Internet Explorer Version 5.0.1 Update sp1
Microsoft ≫ Internet Explorer Version 5.0.1 Update sp2
Microsoft ≫ Internet Explorer Version 5.0.1 Update sp3
Microsoft ≫ Internet Explorer Version 5.0.1 Update sp4
Microsoft ≫ Internet Explorer Version 5.01
Microsoft ≫ Internet Explorer Version 5.1
Microsoft ≫ Internet Explorer Version 5.01 Update sp1
Microsoft ≫ Internet Explorer Version 5.01 Update sp2
Microsoft ≫ Internet Explorer Version 5.01 Update sp3
Microsoft ≫ Internet Explorer Version 5.01 Update sp4
Microsoft ≫ Internet Explorer Version 5.2.3
Microsoft ≫ Internet Explorer Version 5.5
Microsoft ≫ Internet Explorer Version 5.5 Update preview
Microsoft ≫ Internet Explorer Version 5.5 Update sp1
Microsoft ≫ Internet Explorer Version 5.5 Update sp2
Microsoft ≫ Internet Explorer Version 6 Update sp1
Microsoft ≫ Internet Explorer Version 6.0
Microsoft ≫ Internet Explorer Version 6.0.2600
Microsoft ≫ Internet Explorer Version 6.0.2800
Microsoft ≫ Internet Explorer Version 6.0.2800.1106
Microsoft ≫ Internet Explorer Version 6.0.2900
Microsoft ≫ Internet Explorer Version 6.0.2900.2180
Microsoft ≫ Internet Explorer Version 7.0
Microsoft ≫ Internet Explorer Version 7.0 Update beta
Microsoft ≫ Internet Explorer Version 7.0 Update beta1
Microsoft ≫ Internet Explorer Version 7.0 Update beta2
Microsoft ≫ Internet Explorer Version 7.0 Update beta3
Microsoft ≫ Internet Explorer Version 7.0.5730.11
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.5% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/37638
http://xs-sniper.com/blog/2007/07/20/more-uri-stuff-ies-resouce-uri/
Exploit