Back to search
CVE-2002-1338
Published: Dec 11, 2002
Modified: Aug 8, 2024
PUBLISHED
Description
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://security.greymagic.com/adv/gm008-ie/
x_refsource_MISC
owc-chart-load-exist(8784)
vdb-entry
x_refsource_XF
VU#156123
third-party-advisory
x_refsource_CERT-VN
20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)
mailing-list
x_refsource_BUGTRAQ
4454
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now