New Version of Flashback Mac Trojan Found Using Java Exploits

A new version of the Flashback Trojan that targets Macs has appeared, and this one uses a drive-by download technique to attempt exploits of two Java vulnerabilities. The Flashback.G malware also tries to trick users into accepting a fake digital certificate, which will install the malware if the...

IBM Rational Rhapsody BBFlashBack.Recorder.1 TestCompatibilityRecordMode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBa...

IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within BB...

Blueberry FlashBack SDK 'BB FlashBack Recorder.dll' Remote Code Execution

The remote host has a vulnerable version of the Blueberry 'BB FlashBack Recorder.dll' control installed. This control is affected by multiple unspecified remote code execution vulnerabilities related the 'FBRecorder' class and the 'Start', 'PauseAndSave', 'InsertMarker', 'InsertSoundToFBRAtMarker...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control RCE Vulnerabilities

IBM Rational Rhapsody is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution VUlnerabilities

This host is installed with IBM Rational Rhapsody and is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmrationalrhapsodyactivexcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

CVE-2011-1388

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

CVE-2011-1392

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

CVE-2011-1391

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

CVE-2011-1388

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

CVE-2011-1391

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1392

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the 1 Start, 2 PauseAndSave, 3 InsertMarker, and 4 InsertSoundToFBRAtMarker methods, which allows remote...

CVE-2011-1391

CVE-2011-1391 concerns the Blueberry FlashBack ActiveX control (BB FlashBack Recorder.dll) used with IBM Rational Rhapsody for Windows. The IBM Security Bulletin details a vulnerability where uninitialized pointers passed to InsertMarker() in BB FlashBack Recorder.dll can be exploited to remotely...

CVE-2011-1392

CVE-2011-1392 affects the IBM Rational Rhapsody/BB FlashBack ActiveX control (BB FlashBack Recorder.dll). The IBM advisory and ZDI/OpenVAS entries describe remote code execution via the ActiveX control when invoked in Internet Explorer, exploiting functions Start(), PauseAndSave(), InsertMarker()...

CVE-2011-1388

The CVE-2011-1388 issue affects IBM Rational Rhapsody for Windows (BB FlashBack ActiveX control, BB FlashBack Recorder.dll). The published details describe remote code execution via the BB FlashBack Recorder.dll ActiveX control when invoked from Internet Explorer, with uninitialized pointers pass...

CVE-2011-1388: Improper Control of Generation of Code

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...

CVE-2011-1391: Improper Control of Generation of Code

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors...