CVE-2008-2683

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

34.76%

Published

Jun 12, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBBlack Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)Exploit-DBBlack Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)Exploit-DBBlack Ice Software Inc Barcode SDK - 'BIDIB.ocx' Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second argument. NOTE: some of these details are obtained from third party information.

Weaknesses (CWE)

CWE-20

Affected Products (1)

black_ice · barcode_sdkvulnerable

References (16)

http://secunia.com/advisories/30548

Vendor Advisory

http://securityreason.com/securityalert/8276

http://securityreason.com/securityalert/8277

http://www.exploit-db.com/exploits/17415

http://www.osvdb.org/46007

http://www.vupen.com/english/advisories/2008/1768/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/42891

https://www.exploit-db.com/exploits/5750

http://secunia.com/advisories/30548

KEV Catalog EPSS Scores Vendors All CVEs