CVE-2008-3209: Blackice Black Ice Document Imaging SDK

High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx. NOTE: some of these details are obtained from third party information.

Affected products

  • Blackice Black Ice Document Imaging SDK: version 10.95 only

Published 2008-07-18. Last modified 2026-06-16.