Remote Code Execution Vulnerability in Microsoft Project by Microsoft

CVE-2008-1088

Summary

This vulnerability exists in Microsoft Project versions 2000 Service Release 1, 2002 SP1, and 2003 SP2, where improper validation of memory resource allocations can be exploited by remote attackers. Specifically, by tricking users into opening a specially crafted Project file, an attacker may execute arbitrary code on the victim's system, potentially leading to unauthorized access and data compromise.

References