EUVD-2008-6918

Malware in sbrugna...

CVE-2008-6959

Insecure method vulnerability in the Chilkat Socket ActiveX control ChilkatSocket.ChilkatSocket.1 in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastError method. NOTE: this might be related to CVE-2008-1647...

CVE-2008-6959

CVE-2008-6959 affects the ChilkatSocket.dll 2.3.1.1 Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1). The vulnerability is an insecure SaveLastError method that allows remote attackers to overwrite arbitrary files. A CIRCL/Exploit-DB entry (Exploit-DB 7142) confirms at least one wor...

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

Security feature bypass

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

CVE-2008-4584

The CVE-2008-4584 entry concerns Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll). The vulnerability is an insecure method vulnerability that allows remote attackers to overwrite arbitrary files by supplying a full pathname to the SaveLastError method. According to the cited sources, this is a ...

CVE-2008-1647

The CVE-2008-1647 entry concerns ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll versions 2.4.0.0, 2.3.0.0 and earlier. The vulnerability arises from exposing the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary f...

Path traversal

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...