VULNERABILITY INTELLIGENCE
CVE-2007-4848
CVSS score4.3 MEDIUM
EPSS probability7.50%
CISA KEVNot currently listed
Published2007-09-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.