Lucene search
HistoryDec 18, 2002 - 5:00 a.m.
CVE-2002-1340
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
71.7%
The “ConnectionFile” property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
Affected configurations
Node
microsoftoffice_web_componentsMatch2002
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | office_web_components | 2002 | cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
71.7%
Related for NVD:CVE-2002-1340