Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*

part: a version: 2002 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductProject (64e9e0ff-82e1-56bc-b678-d844fd22ebfe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2127 vulnerable 2026-06-08 04:48:28.453792 Details available
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."
Published: 2005-08-19T04:00:00.000Z
Updated: 2024-08-07T22:15:37.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0848 vulnerable 2026-06-08 04:47:51.632297 Details available
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.
Published: 2005-02-08T05:00:00.000Z
Updated: 2024-08-08T00:31:47.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0347 vulnerable 2026-06-08 04:47:21.358922 Details available
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
Published: 2003-09-04T04:00:00.000Z
Updated: 2024-08-08T01:50:47.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0861 vulnerable 2026-06-08 04:46:22.393127 Details available
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
Published: 2002-08-23T04:00:00.000Z
Updated: 2024-08-08T03:03:48.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0860 vulnerable 2026-06-08 04:46:22.392676 Details available
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:03:49.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0727 vulnerable 2026-06-08 04:46:22.100374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.