Unscored CVE-2002-1339 EUVD-2002-1323GHSA-3vxf-84gf-58q9

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to…

Published Dec 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

References

http://security.greymagic.com/adv/gm008-ie/
20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list