Lucene search
HistoryDec 18, 2002 - 5:00 a.m.
CVE-2002-1338
cve-2002-1338
office web components
owc
chart component
remote attackers
local files
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.5%
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
Affected configurations
Node
microsoftoffice_web_componentsMatch2002
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:office_web_components | microsoft office web components | eq | 2002 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.5%
Related for CVE-2002-1338