← Database

CVE-2008-5002

CRITICAL CVSS: 9.3 Published: 2008-11-10 Modified: 2026-06-16

Description

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.

Affected Platforms

Chilkat Software Chilkat Crypt Activex Control

Weakness Type

CWE-20

References