CVE-2007-4848

🗓️ 12 Sep 2007 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 49 Views

Microsoft IE 4.0-7 allows remote attackers to determine existence of local files via res:// UR

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2007-4848	12 Sep 200720:00	–	cvelist
NVD	CVE-2007-4848	12 Sep 200720:17	–	nvd
Prion	Code injection	12 Sep 200720:17	–	prion

NVD

Node

microsoft ieMatch4.x

OR

microsoft ieMatch5.0sp1

OR

microsoft ieMatch5.0sp4

OR

microsoft ieMatch5.0_ta3

OR

microsoft ieMatch5.x

OR

microsoft ieMatch6.0sp1

OR

microsoft ieMatch6.0sp2

OR

microsoft internet_explorerMatch4.0

OR

microsoft internet_explorerMatch4.0.1

OR

microsoft internet_explorerMatch4.1

OR

microsoft internet_explorerMatch4.5

OR

microsoft internet_explorerMatch5

OR

microsoft internet_explorerMatch5.0

OR

microsoft internet_explorerMatch5.0.1

OR

microsoft internet_explorerMatch5.0.1sp1

OR

microsoft internet_explorerMatch5.0.1sp2

OR

microsoft internet_explorerMatch5.0.1sp3

OR

microsoft internet_explorerMatch5.0.1sp4

OR

microsoft internet_explorerMatch5.01

OR

microsoft internet_explorerMatch5.1

OR

microsoft internet_explorerMatch5.01sp1

OR

microsoft internet_explorerMatch5.01sp2

OR

microsoft internet_explorerMatch5.01sp3

OR

microsoft internet_explorerMatch5.01sp4

OR

microsoft internet_explorerMatch5.2.3

OR

microsoft internet_explorerMatch5.5

OR

microsoft internet_explorerMatch5.5preview

OR

microsoft internet_explorerMatch5.5sp1

OR

microsoft internet_explorerMatch5.5sp2

OR

microsoft internet_explorerMatch6

OR

microsoft internet_explorerMatch6sp1

OR

microsoft internet_explorerMatch6.0

OR

microsoft internet_explorerMatch6.0.2600

OR

microsoft internet_explorerMatch6.0.2800

OR

microsoft internet_explorerMatch6.0.2800.1106

OR

microsoft internet_explorerMatch6.0.2900

OR

microsoft internet_explorerMatch6.0.2900.2180

OR

microsoft internet_explorerMatch7

OR

microsoft internet_explorerMatch7.0

OR

microsoft internet_explorerMatch7.0beta

OR

microsoft internet_explorerMatch7.0beta1

OR

microsoft internet_explorerMatch7.0beta2

OR

microsoft internet_explorerMatch7.0beta3

OR

microsoft internet_explorerMatch7.0.5730.11

Source	Link
xs-sniper	www.xs-sniper.com/blog/2007/07/20/more-uri-stuff-ies-resouce-uri/
osvdb	www.osvdb.org/37638

23 Apr 2026 00:35Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

EPSS0.23388

cve-2007-4848 microsoft internet explorer remote attackers local files res:// uri javascript image object