CVE-2002-0727

The CVE-2002-0727 entry concerns Microsoft Office Web Components (OWC) 2000 and 2002. The Host function is exposed in components marked as safe for scripting, enabling a remote attacker to execute arbitrary commands through the setTimeout method. This defines the vulnerable component/function and...

CVE-2002-1340

The vulnerability CVE-2002-1340 affects Office Web Components (OWC) DataSourceControl’s property in OWC 10. An attacker can remotely determine the existence of local files by triggering an exception, revealing information about local file presence. The available documents do not specify affected...

CVE-2002-0860

The CVE-2002-0860 vulnerability affects Microsoft Office Web Components (OWC) 2000 and 2002, where the LoadText method in the spreadsheet component allows a remote attacker using an Internet Explorer URL redirect to read arbitrary local files. Underlying issue: inadequate URL handling in the OWC ...

CVE-2002-0861

CVE-2002-0861 affects Microsoft Office Web Components (OWC) 2000 and 2002. The vulnerability arises from a bypass of the setting “Allow paste operations via script,” allowing a remote attacker to paste via script despite the setting being disabled. The issue is triggered through the (1) Copy meth...

CVE-2002-1339

CVE-2002-1339 affects the Spreadsheet component of Office Web Components (OWC) 10. The XMLURL property follows redirections, enabling remote attackers to infer the existence of local files from error responses or to read Worksheet XML files. The provided sources confirm the vulnerability descript...

CVE-2002-1338

CVE-2002-1338 affects the Chart component in Office Web Components (OWC) 9 and 10. The Load method throws an exception when a referenced file does not exist, which can be leveraged by an attacker to determine the existence of local files on the target system. The issue is described in multiple so...