The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=101830175621193&w=2 | |
| http://security.greymagic.com/adv/gm008-ie/ | Exploit Patch Vendor Advisory |
| http://marc.info/?l=bugtraq&m=101830175621193&w=2 | |
| http://security.greymagic.com/adv/gm008-ie/ | Exploit Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2002-12-18 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-1340
Mitre link : CVE-2002-1340
CVE.ORG link : CVE-2002-1340
JSON object : View
Products Affected
microsoft
- office_web_components
CWE
