VULNERABILITY INTELLIGENCE

CVE-2008-1647

CVSS score9.3 HIGH
EPSS probability7.01%
CISA KEVNot currently listed
Published2008-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references