Remote file detection vulnerability in Microsoft Internet Explorer

CVE-2007-4848

Summary

The vulnerability exists in Microsoft Internet Explorer versions 4.0 through 7, which permits remote attackers to identify the presence of local files associated with images. This is achieved through the use of a res:// URI in the src property of a JavaScript Image object. Attackers can exploit this flaw to expose local file structures as demonstrated by accessing bitmap images within executable (.exe) or dynamic link library (.dll) files.

References