Unscored CVE-2002-1340 EUVD-2002-1324GHSA-p2xh-ccf8-ggqg

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the…

Published Dec 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

References

http://security.greymagic.com/adv/gm008-ie/
20020408 Multiple local files detection issues with OWC in IE (GM#008-IE) mailing-list