CVE:CVE-2009-0102
CNNVD:CNNVD-200912-108
Project是微软Office套件中的项目管理和控制组件。  
Project的winproj.exe服务在处理包含有畸形元素字段列表结构的特制Project文件时存在内存破坏漏洞。攻击者可以通过畸形文档触发这个漏洞，导致执行任意指令。
solution:Upgrade microsoft office_project to a higher version than 2007:sp1,2007:sp2,and avoid the version 2007:sp1,2007:sp2; Upgrade microsoft project_portfolio_server to a higher version than 2007:sp1,2007:sp2,and avoid the version 2007:sp1,2007:sp2; Upgrade microsoft project_server to a higher version than 2003:sp3,2007:sp1,2007:sp2,and avoid the version 2003:sp3,2007:sp1,2007:sp2