CVE-2008-1282: b21soft Bfup

High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days.

Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter.

Affected products

• b21soft Bfup: up to and including 1.0.308_19

Published 2008-03-10. Last modified 2026-06-16.