CVE-2002-1339

Description

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Affected products

• microsoft / office_web_components2002 – 2002

References

• MISChttp://security.greymagic.com/adv/gm008-ie/
• MAILING_LISThttp://marc.info/?l=bugtraq&m=101830175621193&w=2