Description
The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
References (2)
Core 2
Core References
Exploit, Patch, Vendor Advisory x_refsource_misc
http://security.greymagic.com/adv/gm008-ie/
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101830175621193&w=2
Scores
EPSS
0.1197
EPSS Percentile
95.7%
Details
Status
published
Products (1)
microsoft/office_web_components
2002
Published
Dec 18, 2002
Tracked Since
Feb 18, 2026