IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within BB...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution VUlnerabilities

This host is installed with IBM Rational Rhapsody and is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmrationalrhapsodyactivexcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control RCE Vulnerabilities

IBM Rational Rhapsody is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

CVE-2011-1391

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1392

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

CVE-2011-1391

CVE-2011-1391 concerns the Blueberry FlashBack ActiveX control (BB FlashBack Recorder.dll) used with IBM Rational Rhapsody for Windows. The IBM Security Bulletin details a vulnerability where uninitialized pointers passed to InsertMarker() in BB FlashBack Recorder.dll can be exploited to remotely...

Format string

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1502

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

Buffer overflow

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1502

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

CVE-2007-1502

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

CVE-2007-1503

CVE-2007-1503 concerns the Rhapsody IRC client (version 0.28b) with multiple format string vulnerabilities in comm.c, specifically in create_ctcp_message used by (1) me and (2) ctcp commands, and potentially vectors involving (3) whois, (4) mode, and (5) topic. The defect allows remote attackers ...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1502

CVE-2007-1502 affects Rhapsody IRC 0.28b; multiple buffer overflow paths allow remote code execution via long arguments across commands (connect, server, nick, ctcp/chat/notice/msg, query). The connected sources corroborate a set of six or more long-argument vectors (1) command, (2) server argume...

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability

Rhapsody IRC 0.28b NICK Multiple fs and bof vulnerability Description: Rhapsody is a text console IRC client for Unix operating systems. It is small, fast, portable, easy to use and full featured. An intuitive menu-driven user interface makes rhapsody ideal for beginner to intermediate users. Fou...