Microsoft Office Project Memory Validation Remote Code Execution (MS09-074) - Ver2 (CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

CVE-2009-0102

Summary: CVE-2009-0102 is a remote code execution vulnerability in Microsoft Office Project components. The flaw is rooted in how Project files are parsed; specifically, memory allocations are not properly validated when opening Project files, leading to memory corruption in winproj.exe and the a...

Fortinet Advisory: Fortinet Discovers Microsoft Office Project Vulnerability

Fortinet Discovers Microsoft Office Project Vulnerability MS09-074 2009.December.08 Summary: Fortinet's FortiGuard Labs Discovers Memory Corruption Vulnerability in Microsoft Office Project. Impact: Remote Code Execution. Risk: Critical. Affected Software: For a list of operating system and produ...

Microsoft Office Project Memory Validation Remote Code Execution (MS09-074; CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

MS09-074: Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183)

The remote host contains a version of Microsoft Project that has a vulnerability in the way it validates memory that could be used by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to spend a specially crafted Project document to a...