CVE-2008-1647 The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, whic...
HighCVSS 9.3
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chilkat software chilkathttp activex | <= 2.3.0.0 | No fix listed |
| chilkat software chilkathttp activex | <= 2.4.0.0 | No fix listed |
References
- 29581 third-party-advisory vendor-advisory
- 28546 exploit vdb-entry
- www.shinnai.altervista.org exploit
- ADV-2008-1050 vdb-entry
- chilkathttp-activex-file-overwrite(45988) vdb-entry
- 5338 exploit