Design/Logic Flaw

2009-02-0501:30:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.4%

JSON

Microsoft Word 2007, when the “Save as PDF” add-on is enabled, places an absolute pathname in the Subject field during an “Email as PDF” operation, which allows remote attackers to obtain sensitive information such as the sender’s account name and a Temporary Internet Files subdirectory name.