CVE-2008-5002

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: some of these details are obtained from third party information.

• CWE-20

• http://secunia.com/advisories/32513Vendor Advisory
• http://securityreason.com/securityalert/4571
• http://www.securityfocus.com/bid/32073
• http://www.vupen.com/english/advisories/2008/2998
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46315
• https://www.exploit-db.com/exploits/6963
• http://secunia.com/advisories/32513Vendor Advisory
• http://securityreason.com/securityalert/4571
• http://www.securityfocus.com/bid/32073
• http://www.vupen.com/english/advisories/2008/2998
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46315
• https://www.exploit-db.com/exploits/6963

Published

Nov 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4996init in initramfs-tools 0.92f allows local users to overwrit…5.5
• CVE-2008-4997dfxml-invoice in datafreedom-perl 0.1.7 allows local users t…
• CVE-2008-4998postinst in twiki 4.1.2 allows local users to overwrite arbi…
• CVE-2008-4999Nortel Networks UNIStim IP Phone 0604DAS allows remote attac…
• CVE-2008-5000SQL injection vulnerability in admin/includes/news.inc.php i…
• CVE-2008-5001Multiple stack-based buffer overflows in multiple functions …
• CVE-2008-5003SQL injection vulnerability in ndetail.php in Shahrood allow…
• CVE-2008-5004SQL injection vulnerability in genscode.php in myWebland Blo…
• CVE-2008-5005Multiple stack-based buffer overflows in (1) University of W…
• CVE-2008-5006smtp.c in the c-client library in University of Washington I…
• CVE-2008-5007create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local …
• CVE-2008-5008Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka…