Microsoft OWC Spreadsheet XMLURL Local File Existence Disclosure Vulnerability
BID:4455
Info
Microsoft OWC Spreadsheet XMLURL Local File Existence Disclosure Vulnerability
| Bugtraq ID: | 4455 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2002 12:00AM |
| Updated: | Apr 08 2002 12:00AM |
| Credit: | Discovered by GreyMagic Software <[email protected]>. |
| Vulnerable: |
Microsoft Office Web Components 2002 |
| Not Vulnerable: | |
Discussion
Microsoft OWC Spreadsheet XMLURL Local File Existence Disclosure Vulnerability
Microsoft Office Web Components (OWC) are a collection of ActiveX objects which provide limited Office functionality to web pages. OWC is installed by default with both Office 2000 and Office XP.
A vulnerability has been reported within some versions of the OWC Spreadsheet component. It is possible for a web page using this component to verify the existence of any specified local file. This may be accomplished by passing the XMLURL property of the OWC object a URL which then redirects to a local file.
Additionally, it is possible to view the file contents if the file is a valid WorkSheet XML document. The attacker may also be able to use this information to perform further, intelligent attacks against the vulnerable system.
Microsoft Office Web Components (OWC) are a collection of ActiveX objects which provide limited Office functionality to web pages. OWC is installed by default with both Office 2000 and Office XP.
A vulnerability has been reported within some versions of the OWC Spreadsheet component. It is possible for a web page using this component to verify the existence of any specified local file. This may be accomplished by passing the XMLURL property of the OWC object a URL which then redirects to a local file.
Additionally, it is possible to view the file contents if the file is a valid WorkSheet XML document. The attacker may also be able to use this information to perform further, intelligent attacks against the vulnerable system.
Solution / Fix
Microsoft OWC Spreadsheet XMLURL Local File Existence Disclosure Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.