CVE-2008-5002
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 40.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 40.66% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- chilkat software/chilkat crypt activex control
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32513Vendor Advisory
- http://securityreason.com/securityalert/4571
- http://www.securityfocus.com/bid/32073
- http://www.vupen.com/english/advisories/2008/2998
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46315
- https://www.exploit-db.com/exploits/6963
- http://secunia.com/advisories/32513Vendor Advisory
- http://securityreason.com/securityalert/4571
- http://www.securityfocus.com/bid/32073
- http://www.vupen.com/english/advisories/2008/2998
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46315
- https://www.exploit-db.com/exploits/6963
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.