$ cve CVE-2008-2283 JSON

CVE-2008-2283 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 6% (pctl 93)

Patch early

A public exploit exists.

Description

IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6.dll (aka IDAutomation Linear BarCode) 1.6.0.6, (b) the IDAuto.Datamatrix.1 ActiveX control in IDAutomationDMATRIX6.DLL (aka IDautomation Datamatrix Barcode) 1.6.0.6, (c) the IDAuto.PDF417.1 ActiveX control in IDAutomationPDF417_6.dll (aka IDautomation PDF417 Barcode) 1.6.0.6, and (d) the IDAuto.Aztec.1 ActiveX control in IDAutomationAZTEC.dll (aka IDautomation Aztec Barcode) 1.7.1.0.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	6% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2008-05-18
Last modified	2026-06-16

Affected (4)

Vendor	Product
idautomation	aztec barcode
idautomation	datamatrix barcode
idautomation	linear barcode
idautomation	pdf417 barcode

Public exploits

Source	Title	Date
exploit-db	idautomation bar code - ActiveX Multiple Vulnerabilities	2008-05-14

References

→ the Explorer · watch your stack · NVD