PT-2008-2686 · Microsoft · Office Project

Publicado 2008-04-08 · Atualizado 2018-10-12 · CVE-2008-1088

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Project versions 2000 Service Release 1, 2002 SP1, 2003 SP2

Description The issue allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of memory resource allocations.

Recommendations For Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-1088

Produtos afetados

Office Project

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2008-1088 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5384 · Nota
• http://kb.cert.org/vuls/id/155563 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-018 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=120845064910729&w=2 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41447 · Nota
• http://secunia.com/advisories/29690 · Aviso do Fabricante
• http://securitytracker.com/id?1019797 · Nota
• http://us-cert.gov/cas/techalerts/TA08-099A.html · Nota
• http://securityfocus.com/bid/28607 · Correção
• http://vupen.com/english/advisories/2008/1142/references · Nota