The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
References
Link | Resource |
---|---|
http://security.greymagic.com/adv/gm008-ie/ | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=101830175621193&w=2 |
Configurations
Information
Published : 2002-12-17 21:00
Updated : 2016-10-17 19:26
NVD link : CVE-2002-1340
Mitre link : CVE-2002-1340
JSON object : View
CWE
Products Affected
microsoft
- office_web_components