CVE-2011-1392: Code Injection
The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1392?
CVE-2011-1392 is classified with a medium severity, due to its potential to allow remote code execution.
How do I fix CVE-2011-1392?
To fix CVE-2011-1392, update BB FlashBack Recorder to a version later than the affected versions, ideally to 7.6.1 or later.
Which versions of BB FlashBack are affected by CVE-2011-1392?
CVE-2011-1392 affects versions of BB FlashBack prior to 7.6.1.
What products are impacted by CVE-2011-1392?
CVE-2011-1392 impacts Blueberry BB FlashBack used in IBM Rational Rhapsody versions before 7.6.1.
What methods are improperly implemented in CVE-2011-1392?
CVE-2011-1392 involves improper implementation of the Start, PauseAndSave, InsertMarker, and InsertSoundToFBRAtMarker methods.