RCE in Microsoft Organization Chart
CVE-2008-3956
orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.134 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Organization_chart — versions 2.00
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)