CVE-2008-4584

This exploit leverages an arbitrary file creation vulnerability in ChilkatFTP.dll v3.0.0.2 via the SaveLastError method of the ChilkatSocket ActiveX control. It allows an attacker to write arbitrary data to a specified file path (e.g., c:\boot_.ini) when a user clicks a button on a malicious webpage.

This exploit leverages an insecure method in Chilkat Mail ActiveX (ChilkatCert.dll) to write arbitrary files to the filesystem via the SaveLastError method. It is triggered by a VBScript onclick event in an HTML page, demonstrating a classic ActiveX exploitation technique.