CVE-2008-2684 The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFi...
HighCVSS 9.3
EPSS 8.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackice black ice barcode sdk | = 5.01 | No fix listed |
References
- 30548 third-party-advisory vendor-advisory
- 29579 vdb-entry
- ADV-2008-1768 vdb-entry
- barcode-bidib-code-execution(42896) vdb-entry
- 5750 exploit