CVE-2011-1392

CVE-2011-1392 describes a critical vulnerability in the Blueberry FlashBack ActiveX control (BB FlashBack Recorder.dll), affecting Blueberry BB FlashBack and IBM Rational Rhapsody prior to version 7.6.1. This flaw stems from improper implementation of several methods, including Start, PauseAndSave, InsertMarker, and InsertSoundToFBRAtMarker. A remote attacker could exploit this weakness through unspecified vectors to execute arbitrary code on a vulnerable system. The vulnerability carries a CVSS score of 9.3, indicating high severity with a network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 75/100, further highlighting its significant potential impact. Despite its severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention or exploitation in the wild.