CVE:CVE-2007-4848
CNNVD:CNNVD-200709-151
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。
Microsoft Internet Explorer 4.0到7存在安全漏洞，允许远程攻击者可以借助一个JavaScript Image object的src特性的一个res:// URI测定具有相关图像的本地文件的存在。例如用一个(1) .exe或(2) .dll文件中的bitmap图像资源的URI。
solution:Upgrade microsoft ie to a higher version than 4.x,5.0:sp1,5.0:sp4,5.0_ta3,5.x,6.0:sp1,6.0:sp2,and avoid the version 4.x,5.0:sp1,5.0:sp4,5.0_ta3,5.x,6.0:sp1,6.0:sp2; Upgrade microsoft internet_explorer to a higher version than 4.0,4.0.1,4.1,4.5,5,5.0,5.0.1,5.0.1:sp1,5.0.1:sp2,5.0.1:sp3,5.0.1:sp4,5.01,5.1,5.01:sp1,5.01:sp2,5.01:sp3,5.01:sp4,5.2.3,5.5,5.5:preview,5.5:sp1,5.5:sp2,6,6:sp1,6.0,6.0.2600,6.0.2800,6.0.2800.1106,6.0.2900,6.0.2900.2180,7,7.0,7.0:beta,7.0:beta1,7.0:beta2,7.0:beta3,7.0.5730.11,and avoid the version 4.0,4.0.1,4.1,4.5,5,5.0,5.0.1,5.0.1:sp1,5.0.1:sp2,5.0.1:sp3,5.0.1:sp4,5.01,5.1,5.01:sp1,5.01:sp2,5.01:sp3,5.01:sp4,5.2.3,5.5,5.5:preview,5.5:sp1,5.5:sp2,6,6:sp1,6.0,6.0.2600,6.0.2800,6.0.2800.1106,6.0.2900,6.0.2900.2180,7,7.0,7.0:beta,7.0:beta1,7.0:beta2,7.0:beta3,7.0.5730.11