medium6.8Public exploit code
CVE-2008-4584
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Chilkat FTP - ActiveX (SaveLastError) Insecure Method2008-12-28 · remote · windows · Verified
- Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method2008-01-29 · remote · windows · Verified
Impact
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chilkat Software | Version 7.8 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4424
- http://www.securityfocus.com/bid/27493
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40041
- https://www.exploit-db.com/exploits/5005
- http://securityreason.com/securityalert/4424
- http://www.securityfocus.com/bid/27493
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40041
- https://www.exploit-db.com/exploits/5005