CVE-2009-0102

No fix known EPSS 24%

Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."

Published 2009-12-09 · CVE record · OSV

Products: microsoft office_project, microsoft project_portfolio_server, microsoft project_server