What’s Vulnerable › Vulnerabilities

CVE-2002-1339

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-18 · updated 2026-06-16

Description

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Affected products

• Microsoft Office Web Components: 2002

References

• http://marc.info/?l=bugtraq&m=101830175621193&w=2
• http://security.greymagic.com/adv/gm008-ie/
• http://marc.info/?l=bugtraq&m=101830175621193&w=2
• http://security.greymagic.com/adv/gm008-ie/

Get alerted when CVE-2002-1339 or the next vulnerability affects your stack