← Database

CVE-2002-1339

MEDIUM CVSS: 5.0 Published: 2002-12-18 Modified: 2026-06-16

Description

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Affected Platforms

Microsoft Office Web Components

Weakness Type

NVD-CWE-Other

References