Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2009-0102

Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."

  • Published: Dec 9, 2009
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-0102
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
microsoft / office_project 2007-sp1 2007-sp1.x
microsoft / office_project 2007-sp2 2007-sp2.x
microsoft / project_server 2007-sp1 2007-sp1.x
microsoft / project_server 2003-sp3 2003-sp3.x
microsoft / project_portfolio_server 2007-sp2 2007-sp2.x
microsoft / project_server 2007-sp2 2007-sp2.x
microsoft / project_portfolio_server 2007-sp1 2007-sp1.x