Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save florian-obradovic/a32950dc91fd342e1cf870143a321b60 to your computer and use it in GitHub Desktop.
Save florian-obradovic/a32950dc91fd342e1cf870143a321b60 to your computer and use it in GitHub Desktop.
PowerShell Proactive Remediation to fix Project Client VBA Macros in Enterprise Global (EGlobal) caused by August 2024 Updates. Probably caused by the fix for CVE-2024-38189: Microsoft Project Remote Code Execution vulnerability.
# Script provided as is, no warranty.
# Get in touch: www.theprojectgroup.com - Your Project Experts
#
# [HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\MS Project\Settings]
# "Fix9072568"=dword:00000001
#
# Confirmed to work with August 13, 2024 - Microsoft® Project 2019 MSO (Version 2407 Build 16.0.17830.20166) 64-bit.
# Probably caused by the fix for CVE-2024-38189: Microsoft Project Remote Code Execution vulnerability
# check.ps1
try {
if((Get-ItemPropertyValue -LiteralPath 'HKCU:\Software\Microsoft\Office\16.0\MS Project\Settings' -Name 'Fix9072568' -ea SilentlyContinue) -eq 1)
{
exit 0
}
else{
exit 1
}
}
catch{
$errMsg = $_.Exception.Message
Write-Error $errMsg
exit 1
}
# remediate.ps1
try{
if((Test-Path -LiteralPath "HKCU:\Software\Microsoft\Office\16.0\MS Project\Settings") -ne $true) { New-Item "HKCU:\Software\Microsoft\Office\16.0\MS Project\Settings" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKCU:\Software\Microsoft\Office\16.0\MS Project\Settings' -Name 'Fix9072568' -Value 1 -PropertyType DWord -Force -ea SilentlyContinue;
exit 0
}
catch{
$errMsg = $_.Exception.Message
Write-host $errMsg
exit 1
}
@samtyson
Copy link

Any update for Microsoft® Project® Online Desktop Client MSO (Version 2408 Build 16.0.17928.20114) 64-bit ?

@florian-obradovic
Copy link
Author

florian-obradovic commented Sep 2, 2024

https://answers.microsoft.com/en-us/msoffice/forum/all/macros-that-we-wrote-in-project-online-in-the/19577051-7a62-4f7b-b80c-58902919108a

^^ 2408 seems to be still affected
According to Microsoft they „plan“ to release a fix the end of September.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment