CVE-2008-1647: Chilkat Software Chilkathttp Activex

High severity, CVSS 9.3. EPSS: 7% chance of exploitation in the next 30 days.

The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.

Affected products

• Chilkat Software Chilkathttp Activex: up to and including 2.3.0.0; up to and including 2.4.0.0

Published 2008-04-02. Last modified 2026-06-16.