{"uuid": "4bd76998-bdc9-499e-a512-ec2ce276968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2683", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/blackice_downloadimagefileurl.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"shinnai\", \"mr_me \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module allows remote attackers to place arbitrary files on a users file system\\n          by abusing the \\\"DownloadImageFileURL\\\" method in the Black Ice BIImgFrm.ocx ActiveX\\n          Control (BIImgFrm.ocx 12.0.0.0).  Code execution can be achieved by first uploading the\\n          payload to the remote machine, and then upload another mof file, which enables Windows\\n          Management Instrumentation service to execute the binary. Please note that this module\\n          currently only works for Windows before Vista.  Also, a similar issue is reported in\\n          BIDIB.ocx (10.9.3.0) within the Barcode SDK.\", \"disclosure_date\": \"2008-06-05\", \"fullname\": \"exploit/windows/browser/blackice_downloadimagefileurl\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Black Ice Cover Page ActiveX Control Arbitrary File Download\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/blackice_downloadimagefileurl.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/browser/blackice_downloadimagefileurl\", \"references\": [\"CVE-2008-2683\", \"OSVDB-46007\", \"BID-29577\", \"EDB-5750\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:00.391359Z"}