The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
References
Link | Resource |
---|---|
http://security.greymagic.com/adv/gm008-ie/ | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=101830175621193&w=2 |
Configurations
Information
Published : 2002-12-17 21:00
Updated : 2016-10-17 19:26
NVD link : CVE-2002-1339
Mitre link : CVE-2002-1339
JSON object : View
CWE
Products Affected
microsoft
- office_web_components