The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Office |
Microsoft |
xp (including) |
xp (including) |
References