Description
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
References
- 4398 vdb-entry
- msoffice-spreadsheet-host-cas(8711) vdb-entry
- 20020331 More Office XP problems mailing-list
- http://www.guninski.com/m%24oxp-2.html