CVE-2008-4343

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.68%

Published

Sep 30, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBChilkat XML - ActiveX Arbitrary File Creation/Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.

Weaknesses (CWE)

CWE-20

Affected Products (1)

chilkat_software · chilkat_xml_activex_controlvulnerable

References (10)

http://secunia.com/advisories/31951

Vendor Advisory

http://www.securityfocus.com/bid/31332

http://www.shinnai.net/xplits/TXT_rNowA1916DKFNUF48NyS

ExploitURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/45333

https://www.exploit-db.com/exploits/6537