Description
The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
References (2)
Core 2
Core References
Exploit, Patch, Vendor Advisory x_refsource_misc
http://security.greymagic.com/adv/gm008-ie/
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101830175621193&w=2
Scores
EPSS
0.1197
EPSS Percentile
95.7%
Details
Status
published
Products (1)
microsoft/office_web_components
2002
Published
Dec 18, 2002
Tracked Since
Feb 18, 2026