Unscored CVE-2008-1088 EUVD-2008-1099GHSA-r3p6-4j7v-2gpw

Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a craf…

Published Apr 8, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."

References

TA08-099A third-party-advisory
SSRT080048 vendor-advisory
28607 vdb-entry
ADV-2008-1142 vdb-entry
project-file-code-execution(41447) vdb-entry
29690 third-party-advisory
oval:org.mitre.oval:def:5384 vdb-entry signature
MS08-018 vendor-advisory
VU#155563 third-party-advisory
1019797 vdb-entry