CVE-2011-1392

Опубликовано: 23 дек. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.

Ссылки

http://secunia.com/advisories/47286
Vendor Advisory
http://secunia.com/advisories/47310
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21576352
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71804
http://secunia.com/advisories/47286
Vendor Advisory
http://secunia.com/advisories/47310
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21576352
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71804

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:.bbsoftware:bb_flashback:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:ibm:rational_rhapsody:*:*:*:*:*:*:*:*

Версия до 7.6.0.1 (включая)

cpe:2.3:a:ibm:rational_rhapsody:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody:7.6:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.0254

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-28wv-3g38-px4r

github

больше 3 лет назад