CVE-2008-3956: Microsoft Organization Chart

High severity, CVSS 9.3. EPSS: 13.4% chance of exploitation in the next 30 days.

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.

Affected products

• Microsoft Organization Chart: version 2.00 only

Published 2008-09-11. Last modified 2026-06-16.