CVE-2011-1388

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via unspecified vectors.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:.bbsoftware:bb_flashback:*:*:*:*:*:*:*:*
OR cpe:2.3:a:ibm:rational_rhapsody:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.5.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody:7.6:*:*:*:*:*:*:*

History

No history.

Information

Published : 2011-12-23 22:55

Updated : 2024-02-04 17:54


NVD link : CVE-2011-1388

Mitre link : CVE-2011-1388

CVE.ORG link : CVE-2011-1388


JSON object : View

Products Affected

.bbsoftware

  • bb_flashback

ibm

  • rational_rhapsody
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')