Lucene search

PRIOn knowledge basePRION:CVE-2008-2683

HistoryJun 12, 2008 - 12:21 p.m.

Information disclosure

2008-06-1212:21:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.844 High

EPSS

Percentile

98.5%

JSON

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to force the download and storage of arbitrary files by specifying the origin URL in the first argument to the DownloadImageFileURL method, and the local filename in the second argument. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
barcode_sdkeq5.01

CPE	Name	Operator	Version
	barcode_sdk	eq	5.01

References

secunia.com/advisories/30548

securityreason.com/securityalert/8276

securityreason.com/securityalert/8277

www.osvdb.org/46007

www.vupen.com/english/advisories/2008/1768/references

exchange.xforce.ibmcloud.com/vulnerabilities/42891

www.exploit-db.com/exploits/17415

www.exploit-db.com/exploits/5750