CVE-2012-6502

CVE-2012-6502 affects Microsoft Internet Explorer prior to version 10. The vulnerability allows remote attackers to determine the existence of files and read certain data from local files by abusing a UNC share pathname in the SRC attribute of a SCRIPT element, demonstrated via a local file read ...