Vulnerability Details : CVE-2009-0102
Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."
Vulnerability category: Execute code
Products affected by CVE-2009-0102
- cpe:2.3:a:microsoft:project_server:2007:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:project_server:2007:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:project_server:2003:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_project:2007:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_project:2007:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:project_portfolio_server:2007:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:project_portfolio_server:2007:sp2:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-0102
85.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-0102
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2009-0102
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-0102
-
http://www.us-cert.gov/cas/techalerts/TA09-342A.html
Microsoft Updates for Multiple Vulnerabilities | CISAUS Government Resource
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-074
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6298
Jump to