File Exposure Vulnerability in Office Web Components by Microsoft

CVE-2002-1339

Summary

The 'XMLURL' property in the Spreadsheet component of Microsoft Office Web Components 10 follows redirections, enabling remote attackers to exploit this behavior. By doing so, they can identify the existence of local files through exceptions and gain unauthorized access to WorkSheet XML files. This vulnerability poses a significant risk as it can expose sensitive information to potential attackers.

References