MS08-018: Vulnerability in Microsoft Project could allow remote code execution

Microsoft has released security bulletin MS08-018. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200804.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/200804.mspx)
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/ (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms08-018.mspx (http://www.microsoft.com/technet/security/bulletin/ms08-018.mspx)

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site: North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site: For enterprise customers, support for security updates is available through your usual support contacts.

More information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:

• 949043  (http://support.microsoft.com/kb/949043/ ) MS08-018: Description of the security update for Project 2000: April 8, 2008
• 949005  (http://support.microsoft.com/kb/949005/ ) MS08-018: Description of the security update for Microsoft Project 2002: April 8, 2008
• 948962  (http://support.microsoft.com/kb/948962/ ) MS08-018: Description of the security update for Project 2003: April 8, 2008

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported editions of Project 2000

For all supported editions of Project 2002

For all supported editions of Project 2003