CVE-2002-1339

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Scoring

CVSS base score
0.75
EPSS probability
18.76%
Published
2002-12-11
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs