Vulnerability in Microsoft Office_web_components

CVE-2002-1338

The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.

EPSS: 0.234 (97.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Office_web_components — versions 2002
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)