Microsoft Organization Chart 2 - Remote Code Execution

Author: Ivan Sanchez
type: remote
platform: windows
port: 0
date_added: 2008-09-08
date_updated: 2014-03-19
verified: 1
codes: CVE-2008-3956;OSVDB-48000
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/31059/info

Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation.

Remote attackers can exploit this issue by enticing victims into opening a maliciously crafted Organization Chart document.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.

Microsoft Organization Chart 2.00,19 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32339.rar