CVEvulnerability
CVE-2011-1392
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• .bbsoftware bb flashback
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/47286 Vendor Advisory
- http://secunia.com/advisories/47310 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21576352 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71804 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47286 Vendor Advisory
- http://secunia.com/advisories/47310 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21576352 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71804 exchange.xforce.ibmcloud.com