CVE-2002-1340

Description

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

Affected products

• Microsoft / office_web_components2002 – 2002

References

• MISChttp://security.greymagic.com/adv/gm008-ie/
• MAILING_LISThttp://marc.info/?l=bugtraq&m=101830175621193&w=2