Unscored severity · published Dec 18, 2002
CVE-2002-1338
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to…
–
CVSS
23.4%
EPSS
No
On KEV
Description
The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
Exploitation
Is it being used?
Exploit prediction (EPSS)23.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OW
Office Web Components · Microsoft
2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1338
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1338
marc.info
http://marc.info/?l=bugtraq&m=101830175621193&w=2
Exploit
http://security.greymagic.com/adv/gm008-ie/
US Government Resource
http://www.kb.cert.org/vuls/id/156123
www.securityfocus.com
http://www.securityfocus.com/bid/4454
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/8784
More from Office Web Components
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
–
CVE-2009-2496
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3,…
–
CVE-2009-1534
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and…
–
CVE-2009-0562
The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1…