CVE-2008-2693: Black Ice Barcode SDK

High severity, CVSS 9.3. EPSS: 10.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to execute arbitrary code via a long first argument to the SetByteOrder method.

Affected products

• Black Ice Barcode SDK: version 5.01 only

Published 2008-06-13. Last modified 2026-06-16.