CVE-2007-4848: Microsoft Ie

Medium severity, CVSS 4.3. EPSS: 7.5% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.

Affected products

• Microsoft Ie: version 4.x only; version 5.0 only; version 5.0_ta3 only; version 5.x only; version 6.0 only
• Microsoft Internet Explorer: version 4.0 only; version 4.0.1 only; version 4.1 only; version 4.5 only; version 5 only; version 5.0 only; …

Published 2007-09-12. Last modified 2026-06-16.