|
CVE Reference: CVE-2008-4343
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2008-4343
|
|
Description:
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the (1) SaveToFile, (2) SaveToTempFile, or (3) AppendBinary method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
|
|
CVE Status:
Candidate
|
|
References:
XF
http://xforce.iss.net/xforce/xfdb/45333
SAID
Secunia Advisory: SA31951
MISC
http://www.shinnai.net/xplits/TXT_rNowA1916DKFNUF48NyS
MILW0RM
http://www.milw0rm.com/exploits/6537
BID
31332
|
|
|
Return to the previous page.
|
