9.3

CVE-2009-0102

Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Project Version 2007 Update sp1
Microsoft ≫ Office Project Version 2007 Update sp2
Microsoft ≫ Project Portfolio Server Version 2007 Update sp1
Microsoft ≫ Project Portfolio Server Version 2007 Update sp2
Microsoft ≫ Project Server Version 2003 Update sp3
Microsoft ≫ Project Server Version 2007 Update sp1
Microsoft ≫ Project Server Version 2007 Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 23.5% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.us-cert.gov/cas/techalerts/TA09-342A.html
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298