Vulnerability in Microsoft Office_web_components
CVE-2002-1340
The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
EPSS: 0.120 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office_web_components — versions 2002
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)