CVEvulnerability

CVE-2002-1339

5.0 MEDIUM Published 2002-12-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Affected configurations

• microsoft office web components 2002

References