CVE-2011-5289
aTube Catcher 2.3.570 - Arbitrary File Write via SaveDecrypted Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5289. PoCs published by shinnai.
AI-analyzed exploit summary This exploit leverages the Chilkat Crypt ActiveX component's WriteFile method to create and execute arbitrary files. It writes a malicious executable to disk and uses the hcp:// protocol to trigger execution via a Microsoft control (compatUI.dll).
Description
The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname in the argument.
Exploits (1)
This exploit leverages the Chilkat Crypt ActiveX component's WriteFile method to create and execute arbitrary files. It writes a malicious executable to disk and uses the hcp:// protocol to trigger execution via a Microsoft control (compatUI.dll).