GCVE - cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:project:2007:*:*:*:*:*:*:*

part: a version: 2007 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Project (`64e9e0ff-82e1-56bc-b678-d844fd22ebfe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4256`	vulnerable	2026-06-08 04:50:38.356502	Details available The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability." Published: 2008-12-10T13:33:00.000Z Updated: 2024-08-07T10:08:34.915Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/3382 http://www.securityfocus.com/bid/32614 http://www.securitytracker.com/id?1021369 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5651	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4255`	vulnerable	2026-06-08 04:50:38.355970	Details available Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an "allocation error" and memory corruption, aka "Windows Common AVI Parsing Overflow Vulnerability." Published: 2008-12-10T13:33:00.000Z Updated: 2024-08-07T10:08:35.145Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32613 http://www.vupen.com/english/advisories/2008/3382 http://www.zerodayinitiative.com/advisories/ZDI-08-083/ http://www.zerodayinitiative.com/advisories/ZDI-08-083 http://www.securitytracker.com/id?1021369	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4254`	vulnerable	2026-06-08 04:50:38.355390	Details available Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability." Published: 2008-12-10T13:33:00.000Z Updated: 2024-08-07T10:08:34.976Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5805 http://www.vupen.com/english/advisories/2008/3382 http://secunia.com/secunia_research/2007-72/ http://www.securitytracker.com/id?1021369 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4253`	vulnerable	2026-06-08 04:50:38.354805	Details available The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "FlexGrid Control Memory Corruption Vulnerability." Published: 2008-12-10T13:33:00.000Z Updated: 2024-08-07T10:08:34.974Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32592 http://www.vupen.com/english/advisories/2008/3382 http://www.securitytracker.com/id?1021369 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4252`	vulnerable	2026-06-08 04:50:38.353208	Details available The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "DataGrid Control Memory Corruption Vulnerability." Published: 2008-12-10T13:33:00.000Z Updated: 2024-08-07T10:08:34.932Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/3382 http://www.securitytracker.com/id?1021369 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-070 http://www.securityfocus.com/bid/32591 http://support.avaya.com/elmodocs2/security/ASA-2008-473.htm	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.