RCE in .Bbsoftware Bb Flashback
CVE-2011-1391
The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
Affected products
- .Bbsoftware Bb_flashback
- Ibm Rational_rhapsody — versions 7.5, 7.5.0.1, 7.5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)