What is CVE-2008-2683?

CVE-2008-2683 is a vulnerability in N/a. Published 2008-06-12.

Is CVE-2008-2683 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2008-2683

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageF…

EPSS: 0.794 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

30548 (x_refsource_SECUNIA, third-party-advisory)
17415 (exploit, x_refsource_EXPLOIT-DB)
5750 (exploit, x_refsource_EXPLOIT-DB)
ADV-2008-1768 (vdb-entry, x_refsource_VUPEN)
46007 (x_refsource_OSVDB, vdb-entry)
barcode-bidib-file-overwrite(42891) (vdb-entry, x_refsource_XF)
8276 (x_refsource_SREASON, third-party-advisory)
8277 (x_refsource_SREASON, third-party-advisory)

Frequently asked questions

What is CVE-2008-2683?: CVE-2008-2683 is a vulnerability in N/a. Published 2008-06-12.
Is CVE-2008-2683 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.