AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-0102

HIGH · CVSS 9.3 EPSS 23.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-12-09 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft, Office. Its EPSS score suggests a 23.5% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2009-0102
Severity
HIGH
CVSS
9.3
EPSS
23.50%
Microsoft Office

Original NVD Description

Microsoft Project 2000 SR1 and 2002 SP1, and Office Project 2003 SP3, does not properly handle memory allocation for Project files, which allows remote attackers to execute arbitrary code via a malformed file, aka "Project Memory Validation Vulnerability."