CVE-2008-5002
Chilkat Crypt ActiveX Control - Arbitrary File Write via WriteFile Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-5002.
PoCs published by Metasploit, shinnai, shinnai, jduck, including Metasploit module exploits/windows/browser/chilkat_crypt_writefile.
AI-analyzed exploit summary This exploit leverages the 'WriteFile' unsafe method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses the hcp:// protocol to trigger execution, requiring administrative privileges and targeting older Windows versions.
Description
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.
Exploits (3)
This exploit leverages the 'WriteFile' unsafe method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses the hcp:// protocol to trigger execution, requiring administrative privileges and targeting older Windows versions.
This exploit leverages the Chilkat Crypt ActiveX component's WriteFile method to create and execute arbitrary files. It writes a malicious executable to disk and uses the hcp:// protocol to trigger execution via a Microsoft control (compatUI.dll).
This Metasploit module exploits CVE-2008-5002 by leveraging the unsafe 'WriteFile' method in Chilkat Crypt ActiveX control to write and execute arbitrary payloads. It uses an hcp:// protocol URI to trigger immediate execution, requiring Administrator privileges.