CVE-2011-1392

2011-12-2322:55:00

CWE-94

mitre

web.nvd.nist.gov

blueberry flashback

activex

bb flashback

remote code execution

vulnerability

cve-2011-1392

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.43

Percentile

97.4%

JSON

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

.bbsoftwarebb_flashback

AND

ibmrational_rhapsodyRange≤7.6.0.1

ibmrational_rhapsodyMatch7.5

ibmrational_rhapsodyMatch7.5.0.1

ibmrational_rhapsodyMatch7.5.1

ibmrational_rhapsodyMatch7.5.1.1

ibmrational_rhapsodyMatch7.5.2

ibmrational_rhapsodyMatch7.5.2.1

ibmrational_rhapsodyMatch7.5.3

ibmrational_rhapsodyMatch7.5.3.1

ibmrational_rhapsodyMatch7.5.3.2

ibmrational_rhapsodyMatch7.6

VendorProductVersionCPE
.bbsoftwarebb_flashback*cpe:2.3:a:.bbsoftware:bb_flashback:*:*:*:*:*:*:*:*
ibmrational_rhapsody*cpe:2.3:a:ibm:rational_rhapsody:*:*:*:*:*:*:*:*
ibmrational_rhapsody7.5cpe:2.3:a:ibm:rational_rhapsody:7.5:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.0.1cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.1cpe:2.3:a:ibm:rational_rhapsody:7.5.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.1.1cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.2cpe:2.3:a:ibm:rational_rhapsody:7.5.2:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.2.1cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.3cpe:2.3:a:ibm:rational_rhapsody:7.5.3:*:*:*:*:*:*:*
ibmrational_rhapsody7.5.3.1cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
.bbsoftware	bb_flashback	*	cpe:2.3:a:.bbsoftware:bb_flashback::::::::
ibm	rational_rhapsody	*	cpe:2.3:a:ibm:rational_rhapsody::::::::
ibm	rational_rhapsody	7.5	cpe:2.3:a:ibm:rational_rhapsody:7.5:::::::*
ibm	rational_rhapsody	7.5.0.1	cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:::::::*
ibm	rational_rhapsody	7.5.1	cpe:2.3:a:ibm:rational_rhapsody:7.5.1:::::::*
ibm	rational_rhapsody	7.5.1.1	cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:::::::*
ibm	rational_rhapsody	7.5.2	cpe:2.3:a:ibm:rational_rhapsody:7.5.2:::::::*
ibm	rational_rhapsody	7.5.2.1	cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:::::::*
ibm	rational_rhapsody	7.5.3	cpe:2.3:a:ibm:rational_rhapsody:7.5.3:::::::*
ibm	rational_rhapsody	7.5.3.1	cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:::::::*