← All CVEs

CVE-2002-1340

medium · 5

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

5
CVSS
12.0%
EPSS (exploit prob.)
96th
EPSS percentile
2002-12-18
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

VendorProductAffected versions
microsoftoffice_web_components2002

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-1340