Vulnerabilities > CVE-2002-1340 - Remote Security vulnerability in Microsoft Office web Components 2002

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
microsoft

Summary

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

Vulnerable Configurations

Part Description Count
Application
Microsoft
1