CVE-2002-1339: Microsoft Office Web Components

Medium severity, CVSS 5.0. EPSS: 12% chance of exploitation in the next 30 days.

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.

Affected products

• Microsoft Office Web Components: version 2002 only

Published 2002-12-18. Last modified 2026-06-16.