Microsoft Organization Chart 2 - Remote Code Execution

Author: Ivan Sanchez
type: remote
platform: windows
port: 
date_added: 2008-09-08 
date_updated: 2014-03-19 
verified: 1 
codes: CVE-2008-3956;OSVDB-48000 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/31059/info

Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation.

Remote attackers can exploit this issue by enticing victims into opening a maliciously crafted Organization Chart document.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely result in a denial of service.

Microsoft Organization Chart 2.00,19 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/32339.rar