QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-4343

Back to search

CVE-2008-4343

Published: Sep 30, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.

VendorProductVersions

n/a

n/a

affected
n/a

References

31951
third-party-advisory
x_refsource_SECUNIA
6537
exploit
x_refsource_EXPLOIT-DB
31332
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now