CVE

Id
31205  
CVE No.
CVE-2008-1088  
Status
Candidate  
Description
Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332744 31205 CVE-2008-1088 HP:HPSBST02329  View
332745 31205 CVE-2008-1088 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332746 31205 CVE-2008-1088 HP:SSRT080048  View
332747 31205 CVE-2008-1088 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332748 31205 CVE-2008-1088 MS:MS08-018  View
332749 31205 CVE-2008-1088 URL:http://www.microsoft.com/technet/security/bulletin/ms08-018.mspx  View
332750 31205 CVE-2008-1088 CERT:TA08-099A  View
332751 31205 CVE-2008-1088 URL:http://www.us-cert.gov/cas/techalerts/TA08-099A.html  View
332752 31205 CVE-2008-1088 CERT-VN:VU#155563  View
332753 31205 CVE-2008-1088 URL:http://www.kb.cert.org/vuls/id/155563  View
332754 31205 CVE-2008-1088 BID:28607  View
332755 31205 CVE-2008-1088 URL:http://www.securityfocus.com/bid/28607  View
332756 31205 CVE-2008-1088 OVAL:oval:org.mitre.oval:def:5384  View
332757 31205 CVE-2008-1088 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5384  View
332758 31205 CVE-2008-1088 VUPEN:ADV-2008-1142  View
332759 31205 CVE-2008-1088 URL:http://www.vupen.com/english/advisories/2008/1142/references  View
332760 31205 CVE-2008-1088 SECTRACK:1019797  View
332761 31205 CVE-2008-1088 URL:http://www.securitytracker.com/id?1019797  View
332762 31205 CVE-2008-1088 SECUNIA:29690  View
332763 31205 CVE-2008-1088 URL:http://secunia.com/advisories/29690  View
332764 31205 CVE-2008-1088 XF:project-file-code-execution(41447)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45920 JVNDB-2008-001230 Microsoft Jet Database Engine の msjet40.dll におけるバッファオーバーフローの脆弱性 Microsoft Jet Database Engine の msjet40.dll には、Word ファイルの取り扱いに不備があるために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2008-1092 31205 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001230.html  View