CVE-2008-1088: microsoft project Resource Management Errors

EPSS trend

Probability

31.93%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 31.93% on 18-09-2026

18-09-202618-10-2026

EPSS score

31.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.us-cert.gov/cas/techalerts/TA08-099A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
marc.info?l=bugtraq&m=120845064910729&w=2Vendor AdvisoryX Refsource HP
www.securityfocus.com/bid/28607VDB EntryX Refsource BIDPatch
www.vupen.com/english/advisories/2008/1142/referencesVDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/41447VDB EntryX Refsource XF
secunia.com/advisories/29690Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5384VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-018Vendor AdvisoryX Refsource MS
www.kb.cert.org/vuls/id/155563Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securitytracker.com/id?1019797VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2018-8575microsoftmicrosoft project+419.55%7y ago14-11-2018 01:00A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.CVE-2003-0347microsoftoffice+354.87%23y ago04-09-2003 04:00Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.CVE-2015-2503microsoftaccess+1316.53%10y ago11-11-2015 11:00Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, OneNote 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Access 2016, Excel 2016, OneNote 2016, PowerPoint 2016, Project 2016, Publisher 2016, Visio 2016, Word 2016, Skype for Business 2016, and Lync 2013 SP1 allow remote attackers to bypass a sandbox protection mechanism and gain privileges via a crafted web site that is accessed with Internet Explorer, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Microsoft Office Elevation of Privilege Vulnerability."CVE-2007-0671microsoftaccess+13KEV43.24%19y ago03-02-2007 01:00Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.CVE-2020-1322microsoft365_apps+65.48%6y ago09-06-2020 19:44An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.CVE-2020-0760microsoftaccess+228.82%6y ago15-04-2020 15:12A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

All vulnerabilities inproject

CVE-2008-1088: microsoft project Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References