VULNERABILITY INTELLIGENCE

CVE-2011-1392

CVSS score9.3 HIGH
EPSS probability3.43%
CISA KEVNot currently listed
Published2011-12-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references