CVE-2008-5002 Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitr...
HighCVSS 9.3
EPSS 40.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chilkat software chilkat crypt activex control | = 2.1 | No fix listed |
References
- 32513 third-party-advisory vendor-advisory
- 4571 third-party-advisory
- 32073 vdb-entry
- ADV-2008-2998 vdb-entry
- chilkat-crypt-activex-file-overwrite(46315) vdb-entry
- 6963 exploit