Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveLastError method and probably the (2) WriteExe method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Chilkat Zip ActiveX控件任意文件覆盖漏洞
Vulnerability Description
Chilkat Zip是一个功能强大的ActiveX控件,允许建立及管理压缩文件。 Chilkat Zip ActiveX控件在处理请求参数时存在漏洞,远程攻击者可能利用此漏洞破坏用户系统上的文件。 Chilkat Zip ActiveX控件(ChilkatZip2.dll)的SaveLastError()和WriteExe()方式没有正确地验证用户输入。如果用户受骗访问了恶意站点并向上述方式传送了恶意参数的话,就可能导致覆盖任意系统文件。
CVSS Information
N/A
Vulnerability Type
N/A