The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-12-11T05:00:00

Updated: 2024-08-08T03:19:28.609Z

Reserved: 2002-12-03T00:00:00

Link: CVE-2002-1339

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2002-12-18T05:00:00.000

Modified: 2016-10-18T02:26:05.520

Link: CVE-2002-1339

cve-icon Redhat

No data.