CVE-2002-1340 The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
MediumCVSS 5.0
EPSS 12.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office web components | = 2002 | No fix listed |
References
- 20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list
- security.greymagic.com exploit patch vendor-advisory