CVE-2007-4848: microsoft ie
Vulnerability summary
CVE-2007-4848 is a medium (CVSS 4.3) vulnerability in microsoft ie. EPSS estimates a 7.50% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-09-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .exe or (2) .dll file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.50%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.50% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (xs-sniper.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
- ie4.x | 5.0:sp1 | 5.0:sp4 | 5.0_ta3 | 5.x | 6.0:sp1 | 6.0:sp2
- internet_explorerEOL4.0 | 4.0.1 | 4.1 | 4.5 | 5 | 5.0 | 5.01 | 5.01:sp1 | 5.01:sp2 | 5.01:sp3 | 5.01:sp4 | 5.1 | 5.2.3 | 5.5 | 5.5:preview | 5.5:sp1 | 5.5:sp2 | 6 | 6:sp1 | 6.0 | 6.0.2600 | 6.0.2800 | 6.0.2800.1106 | 6.0.2900 | 6.0.2900.2180 | 7 | 7.0 | 7.0:beta | 7.0:beta1 | 7.0:beta2 | 7.0:beta3 | 7.0.5730.11
1 vendor · 2 products