CVE-2011-1388

Опубликовано: 23 дек. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via unspecified vectors.

Ссылки

http://secunia.com/advisories/47286
Vendor Advisory
http://secunia.com/advisories/47310
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21576352
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71694
http://secunia.com/advisories/47286
Vendor Advisory
http://secunia.com/advisories/47310
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21576352
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71694

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:.bbsoftware:bb_flashback:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:ibm:rational_rhapsody:*:*:*:*:*:*:*:*

Версия до 7.6.0.1 (включая)

cpe:2.3:a:ibm:rational_rhapsody:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.6:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02089

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-cvv9-f32p-cp3v

github

больше 3 лет назад