VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 22, 2013· Updated Jun 16, 2026

CVE-2012-6502

CVE-2012-6502

Description

Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \\127.0.0.1\C$\ sequence.

Affected products

7
  • Microsoft/Internet Explorer7 versions
    cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:7.0.5730:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
    • (no CPE)range: <10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.