CVE-2008-3956

Published: Sep 11, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.

Affected (1)

Products: Microsoft: Organization Chart

Microsoft

1 product

Organization Chart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Organization Chart	Version 2.00

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (6)

http://www.nullcode.com.ar/ncs/crash/orgchart.htm

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/31059

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44993

Source: cve@mitre.org

http://www.nullcode.com.ar/ncs/crash/orgchart.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/31059

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44993

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.