CVE-2002-1338 The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of....
MediumCVSS 5.0
EPSS 23.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office web components | = 2002 | No fix listed |
References
- 20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list
- security.greymagic.com exploit patch vendor-advisory
- VU#156123 third-party-advisory us-government-resource
- 4454 vdb-entry
- owc-chart-load-exist(8784) vdb-entry