CVE-2002-1338: Microsoft Office Web Components

Medium severity, CVSS 5.0. EPSS: 23.4% chance of exploitation in the next 30 days.

The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.

Affected products

• Microsoft Office Web Components: version 2002 only

Published 2002-12-18. Last modified 2026-06-16.