Description
The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47286
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71804
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47310
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21576352
Scores
EPSS
0.0358
EPSS Percentile
88.0%
Details
CWE
CWE-94
Status
published
Products (1)
.bbsoftware/bb_flashback
Published
Dec 23, 2011
Tracked Since
Feb 18, 2026