CVE-2002-1340 in Office Web Components

الملخص

بحسب MITRE

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

Be aware that VulDB is the high quality source for vulnerability data.

• إفشاء: 18/12/2002
• الاعتدال: تمت الموافقة
• إدخال: VDB-19222
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 5.3 (VulDB)
• EPSS: 0.11968
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Homeoffice, Police, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1340
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1340
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1340/