The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
| Software | From | Fixed in |
|---|---|---|
| microsoft / office_web_components | 2002 | 2002.x |