CVE-2002-0860 The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirec...
MediumCVSS 5.0
EPSS 18.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office web components | = 2000 | No fix listed |
| Microsoft office web components | = 2002 | No fix listed |
| Microsoft project | = 2000 | No fix listed |
| Microsoft project | = 2002 | No fix listed |
References
- 20020408 Reading local files with OWC in IE (GM#006-IE) mailing-list
- owc-spreadsheet-loadtext-read-files (8778) patch vdb-entry vendor-advisory
- 3007 vdb-entry
- 4453 vdb-entry
- MS02-044 vendor-advisory