CVE-2007-3075

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-06 · updated 2026-06-16

Description

Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme, possibly related to "..%5C" (encoded backslash) sequences.

Affected products

Microsoft Internet Explorer 11: all versions

References

http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/#comment-35888
http://osvdb.org/45436
http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/#comment-35888
http://osvdb.org/45436

Get alerted when CVE-2007-3075 or the next vulnerability affects your stack