CVE-2009-4073: Infoleak

Published Nov 24, 2009

Updated

The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page.

Affected Software

4 affected components

Microsoft Internet Explorer=8

Microsoft Internet Explorer=5

Microsoft Internet Explorer=7

Microsoft Internet Explorer=6

Event History

Nov 24, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4073?

CVE-2009-4073 is considered a moderate severity vulnerability as it allows attackers to discover sensitive local pathnames.

How does CVE-2009-4073 work?

CVE-2009-4073 allows remote attackers to read the dc:title element of a PDF document generated from a local webpage, potentially revealing local pathnames.

What versions of Internet Explorer are affected by CVE-2009-4073?

CVE-2009-4073 affects Internet Explorer versions 6, 7, 8, and also version 5.

How do I fix CVE-2009-4073?

To mitigate CVE-2009-4073, users should update their Internet Explorer to the latest version or apply any available security patches.

What impact does CVE-2009-4073 have on user privacy?

CVE-2009-4073 can compromise user privacy by potentially disclosing local filenames and paths to remote attackers.