CVE-2008-5002
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 41%
from disclosure to weapon679 days
Published on NVDNov 10
1st PoC+679d
metasploitNov 3
exploitation probability
41%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/6963unverifiedexploitdbwww.exploit-db.com/exploits/16518unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.