CVEvulnerability
CVE-2009-0102
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
Affected configurations
• microsoft office project 2007
• microsoft project portfolio server 2007
• microsoft project server 2003
• microsoft project server 2007
Related
Weakness · not in database (1)
References
- http://www.us-cert.gov/cas/techalerts/TA09-342A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA09-342A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298 oval.cisecurity.org