CVE-2008-2684

Black Ice Barcode SDK 5.01 - Remote Code Execution via BIDIB.BIDIBCtrl.1 ActiveX DownloadImageFileURL Method

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2684. PoCs published by shinnai.

AI-analyzed exploit summary This exploit demonstrates two vulnerabilities in Black Ice Software's Barcode SDK (BIDIB.ocx): arbitrary file download and memory corruption via the DownloadImageFileURL method. The PoC uses VBScript to trigger these issues in Internet Explorer.

Description

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via long strings in the two arguments to the DownloadImageFileURL method, which trigger memory corruption. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by shinnai · htmlremotewindows
https://www.exploit-db.com/exploits/5750

This exploit demonstrates two vulnerabilities in Black Ice Software's Barcode SDK (BIDIB.ocx): arbitrary file download and memory corruption via the DownloadImageFileURL method. The PoC uses VBScript to trigger these issues in Internet Explorer.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Black Ice Software Barcode SDK (BIDIB.ocx) version 10.9.3.0
No auth needed
Prerequisites: Internet Explorer with ActiveX enabled · Victim interaction (clicking a button)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42896
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30548
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29579
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5750
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1768/references

Scores

EPSS 0.0874
EPSS Percentile 94.5%

Details

CWE
CWE-94
Status published
Products (1)
blackice/black_ice_barcode_sdk 5.01
Published Jun 12, 2008
Tracked Since Feb 18, 2026