CVE-2012-6502
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information...
CVE-2012-6502 is a low vulnerability (CVSS 2.6) in Microsoft Internet Explorer, published January 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. No source names a fixed version.
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
- Record
CVE-2012-6502- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
- Record
CVE-2012-6502- Updated
- 2026-11-02
EUVDEUVD-2012-6352 No score
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
- Record
EUVD-2012-6352- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-24v8-qmh3-px63 No score
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information...
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
- Record
GHSA-24v8-qmh3-px63- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |