Content

(MS08-018) Microsoft Project Memory Validation Vulnerability (950183)

Type
Buffer Overflow
Impact of exploitation
Remote Code Execution
User Interaction
user interaction is needed
Attack Vector
Maliciously Crafted File
Rating
Medium
CVE reference
CVE-2008-1088,
Vendor Status
Responded and patched
Vulnerable systems
Project  2000 SR1,
Project  2002 SP1,
Project  2003 SP2,
Project  2003 SP3,
Summary
A vulnerability is present in Microsoft Project that may allow for arbitrary code execution. A victim would have to open a maliciously-crafted Microsoft Project file for an attack to occur.

Tab Navigation

Description

Microsoft Project Server is a Microsoft application that stores Project information in a database. It protects against unauthorized access and corruption of this information. A vulnerability exists in Microsoft Project that may allow for arbitrary code execution. The flaw resides in processing of malicously-crafted Project files. The memory allocation error would allow code execution at the rights level of the victim when successfully exploited.

McAfee Product Mitigation & Recommendations

Recommendations

Download and install the patch available from Microsoft (950183): http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx

McAfee Product Mitigation

McAfee Foundstone

This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.

Signature:
(MS08-018) Microsoft Project Memory Validation Vulnerability (950183)
Signature identifier:
5814
Release date:
4/8/2008
McAfee Host IPS

Out of the box, HIPS protects against many buffer overflow exploits. McAfee Avert Labs will continue to update our coverage, as needed, as new exploit vectors are discovered and as new threats emerge.

Signature:
Generic Buffer Overflow Protection
Signature identifier:
428
Release date:
8/24/2000
First released in:
2.0

Additional Resources

Microsoft Security Bulletin: Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)

http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx

All Information

Timeline -

4/8/2008

Vendor has provided a patch.

Description -

Microsoft Project Server is a Microsoft application that stores Project information in a database. It protects against unauthorized access and corruption of this information. A vulnerability exists in Microsoft Project that may allow for arbitrary code execution. The flaw resides in processing of malicously-crafted Project files. The memory allocation error would allow code execution at the rights level of the victim when successfully exploited.

McAfee Product Mitigation & Recommendations

Recommendations -

Download and install the patch available from Microsoft (950183): http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx

McAfee Product Mitigation

McAfee Foundstone

This Foundstone vulnerability check can be used to assess if your systems are vulnerable and is expected to accurately identify if a system is vulnerable in many enterprise environments.

Signature:
(MS08-018) Microsoft Project Memory Validation Vulnerability (950183)
Signature identifier:
5814
Release date:
4/8/2008
McAfee Host IPS

Out of the box, HIPS protects against many buffer overflow exploits. McAfee Avert Labs will continue to update our coverage, as needed, as new exploit vectors are discovered and as new threats emerge.

Signature:
Generic Buffer Overflow Protection
Signature identifier:
428
Release date:
8/24/2000
First released in:
2.0

Additional Resources

Additional Resources -

Microsoft Security Bulletin: Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)

http://www.microsoft.com/technet/security/Bulletin/MS08-018.mspx