Description
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
References
- http://security.greymagic.com/adv/gm008-ie/
- owc-chart-load-exist(8784) vdb-entry
- VU#156123 third-party-advisory
- 20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list
- 4454 vdb-entry