Vulnerability Intelligence Report
CVE-2009-0102
Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:23.50%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| microsoft | office_project | 2007 |
| microsoft | project_portfolio_server | 2007 |
| microsoft | project_server | 2003, 2007 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
23.504%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Microsoft Corporation · Vendor · USA |
| Reserved | 2009-01-08T00:00:00 |
| Published | 2009-12-09T18:00:00 |
| Patch Date | 2009-12-08 |
| Last Updated | 2024-08-07T04:24:18 |
Community Chatter & Buzz