CVE-2008-5002

Chilkat Crypt ActiveX Control - Arbitrary File Write via WriteFile Method

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2008-5002. PoCs published by Metasploit, shinnai, shinnai, jduck, including Metasploit module exploits/windows/browser/chilkat_crypt_writefile.

AI-analyzed exploit summary This exploit leverages the 'WriteFile' unsafe method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses the hcp:// protocol to trigger execution, requiring administrative privileges and targeting older Windows versions.

Description

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16518

This exploit leverages the 'WriteFile' unsafe method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses the hcp:// protocol to trigger execution, requiring administrative privileges and targeting older Windows versions.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Chilkat Crypt ActiveX control (ChilkatCrypt2.DLL version 4.4.4.0 and earlier)
No auth needed
Prerequisites: Victim must be using Internet Explorer with ActiveX enabled · Victim must have administrative privileges · Target system must be running an older version of Windows
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by shinnai · htmlremotewindows
https://www.exploit-db.com/exploits/6963

This exploit leverages the Chilkat Crypt ActiveX component's WriteFile method to create and execute arbitrary files. It writes a malicious executable to disk and uses the hcp:// protocol to trigger execution via a Microsoft control (compatUI.dll).

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Chilkat Crypt ActiveX Component (ChilkatCrypt2.dll)
No auth needed
Prerequisites: Victim must visit a malicious webpage or open a malicious HTML file · Chilkat Crypt ActiveX component must be installed
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
by shinnai, jduck · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/chilkat_crypt_writefile.rb

This Metasploit module exploits CVE-2008-5002 by leveraging the unsafe 'WriteFile' method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses an hcp:// protocol URI to trigger immediate execution, requiring Administrator privileges.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Chilkat Crypt ActiveX (ChilkatCrypt2.DLL version 4.4.4.0 and earlier)
No auth needed
Prerequisites: Victim must visit a malicious webpage · ActiveX controls enabled in browser · Administrator privileges for hcp:// execution
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4571
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46315
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32513
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6963
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2998
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32073

Scores

EPSS 0.4066
EPSS Percentile 98.5%

Details

CWE
CWE-20
Status published
Products (1)
chilkat_software/chilkat_crypt_activex_control 2.1
Published Nov 10, 2008
Tracked Since Feb 18, 2026