CVE-2002-1339 The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions,....
MediumCVSS 5.0
EPSS 12.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office web components | = 2002 | No fix listed |
References
- 20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list
- security.greymagic.com exploit patch vendor-advisory