CVE-2002-1340: Microsoft Office Web Components

Medium severity, CVSS 5.0. EPSS: 12% chance of exploitation in the next 30 days.

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.

Affected products

• Microsoft Office Web Components: version 2002 only

Published 2002-12-18. Last modified 2026-06-16.