CVE-2008-5002

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

40.66%

Published

Nov 10, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBChilkat Crypt - ActiveX Arbitrary File Creation/Execution Exploit-DBChilkat Crypt - ActiveX WriteFile Unsafe Method (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.

Weaknesses (CWE)

CWE-20

Affected Products (1)

chilkat_software · chilkat_crypt_activex_controlvulnerable

References (12)

http://secunia.com/advisories/32513

Vendor Advisory

http://securityreason.com/securityalert/4571

http://www.securityfocus.com/bid/32073

http://www.vupen.com/english/advisories/2008/2998

https://exchange.xforce.ibmcloud.com/vulnerabilities/46315

https://www.exploit-db.com/exploits/6963