CVE-2011-1391

Blueberry BB FlashBack - Remote Code Execution via InsertMarker Method

Title source: llm
STIX 2.1

Description

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71803
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47286
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47310
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21576352

Scores

EPSS 0.0358
EPSS Percentile 88.0%

Details

CWE
CWE-94
Status published
Products (1)
.bbsoftware/bb_flashback
Published Dec 23, 2011
Tracked Since Feb 18, 2026