Blueberry FlashBack SDK 'BB FlashBack Recorder.dll' Remote Code Execution

High Nessus Plugin ID 57729


The remote host has an ActiveX control installed that is affected by multiple remote code execution vulnerabilities.


The remote host has a vulnerable version of the Blueberry 'BB FlashBack Recorder.dll' control installed. This control is affected by multiple unspecified remote code execution vulnerabilities related the 'FBRecorder' class and the 'Start()', 'PauseAndSave()', 'InsertMarker()', 'InsertSoundToFBRAtMarker()', and 'TestCompatibilityRecordMode()' methods. By tricking a victim into visiting a specially crafted web page, an attacker could take advantage of one of these issues to execute arbitrary code in the context of the application.


If you are running IBM Rational Rhapsody 7.6 or earlier, see the IBM advisory for upgrade instructions. Otherwise, either upgrade the control to version (or greater), remove the software, or set the kill bit for the affected control.

See Also

Plugin Details

Severity: High

ID: 57729

File Name: bb_flashback_recorder.nasl

Version: $Revision: 1.5 $

Type: local

Agent: windows

Family: Windows

Published: 2012/01/30

Modified: 2016/06/13

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:.bbsoftware:bb_flashback

Required KB Items: SMB/Registry/Enumerated

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2011/12/23

Vulnerability Publication Date: 2011/12/23

Reference Information

CVE: CVE-2011-1388, CVE-2011-1391, CVE-2011-1392

BID: 51184

OSVDB: 77994