Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2011-1391
HistoryDec 23, 2011 - 10:55 p.m.

CVE-2011-1391

2011-12-2322:55:00
CWE-94
mitre
web.nvd.nist.gov
39
cve-2011-1391
blueberry flashback
bb flashback
ibm rational rhapsody
arbitrary code execution
activex control
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.43

Percentile

97.4%

JSON

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
.bbsoftwarebb_flashback
AND
ibmrational_rhapsodyRange≤7.6.0.1
OR
ibmrational_rhapsodyMatch7.5
OR
ibmrational_rhapsodyMatch7.5.0.1
OR
ibmrational_rhapsodyMatch7.5.1
OR
ibmrational_rhapsodyMatch7.5.1.1
OR
ibmrational_rhapsodyMatch7.5.2
OR
ibmrational_rhapsodyMatch7.5.2.1
OR
ibmrational_rhapsodyMatch7.5.3
OR
ibmrational_rhapsodyMatch7.5.3.1
OR
ibmrational_rhapsodyMatch7.5.3.2
OR
ibmrational_rhapsodyMatch7.6
VendorProductVersionCPE
.bbsoftwarebb_flashback*cpe:2.3:a:.bbsoftware:bb_flashback:*:*:*:*:*:*:*:*
ibmrational_rhapsody*cpe:2.3:a:ibm:rational_rhapsody:*:*:*:*:*:*:*:*
ibmrational_rhapsody7.5cpe:2.3:a:ibm:rational_rhapsody:7.5:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.0.1cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.1cpe:2.3:a:ibm:rational_rhapsody:7.5.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.1.1cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.2cpe:2.3:a:ibm:rational_rhapsody:7.5.2:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.2.1cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.3cpe:2.3:a:ibm:rational_rhapsody:7.5.3:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.3.1cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

zdi 1
cvelist 1
prion 1
securityvulns 2
nvd 1
openvas 3
ibm 1
nessus 2
zdi
zdi
IBM Rational Rhapsody BBFlashBack.Recorder.1 InsertMarker Remote Code Execution Vulnerability
2012-02-08 00:00:00
cvelist
cvelist
CVE-2011-1391
2011-12-23 22:00:00
prion
prion
Design/Logic Flaw
2011-12-23 22:55:00
securityvulns
securityvulns
ZDI-12-029 : IBM Rational Rhapsody BBFlashBack.Recorder.1 InsertMarker Remote Code Execution Vulnerability
2012-02-13 00:00:00
IBM ActiveX multiple security vulnerabilities
2012-02-13 00:00:00
nvd
nvd
CVE-2011-1391
2011-12-23 22:55:00
openvas
openvas
IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution VUlnerabilities
2011-12-29 00:00:00
IBM Rational Rhapsody BB FlashBack SDK ActiveX Control RCE Vulnerabilities
2011-12-29 00:00:00
Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)
2012-03-14 00:00:00
ibm
ibm
Security Bulletin: Rational Rhapsody for Windows Blueberry FlashBack ActiveX Control vulnerabilities (CVE-2011-1388, CVE-2011-1391, CVE-2011-1392)
2022-05-27 20:02:07
nessus
nessus
Blueberry FlashBack SDK 'BB FlashBack Recorder.dll' Remote Code Execution
2012-01-30 00:00:00
MS 2647518: Update Rollup for ActiveX Kill Bits (2647518)
2012-03-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.43

Percentile

97.4%

JSON
Related for CVE-2011-1391
zdi1cvelist1prion1securityvulns2nvd1openvas3ibm1nessus2