Microsoft Project 2000 Service Release 1 2002 SP1 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file related to improper validation of \memory resource allocations.\