Microsoft Project memory corruption
Published:		09.12.2009
Source:		MICROSOFT
SecurityVulns ID:		10455
Type:		client
Level:		6/10
Description:		Memory corruption on Microsoft Office files parsing.

Affected:		MICROSOFT : Project 2000
		MICROSOFT : Project 2002
		MICROSOFT : Project 2003
CVE:		CVE-2009-0102 (Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability.")

Original document		liubing, Fortinet Advisory: Fortinet Discovers Microsoft Office Project Vulnerability (09.12.2009)
		MICROSOFT, Microsoft Security Bulletin MS09-074 - Critical Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183) (09.12.2009)

Files:		Microsoft Security Bulletin MS09-074 - Critical Vulnerability in Microsoft Office Project Could Allow Remote Code Execution (967183)
Discuss:		Read or add your comments to this news (0 comments)