Description
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.
References
- 3913 vdb-entry
- badblue-msoffice-script-directory-traversal(7946) vdb-entry
- 20020121 [resend] Strumpf Noir Society on BadBlue mailing-list