CVE-2014-6611: Input Validation
First published: Sat Oct 25 2014(Updated: )
The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Blackberry Blackberry World | <=5.1.0.52 | |
| Blackberry Blackberry Os | =10.3.0 | |
| Blackberry Blackberry World | <=5.0.0.262 | |
| Blackberry Blackberry Os | =10.2.1 | |
| Blackberry Blackberry World | <=5.0.0.261 | |
| Blackberry Blackberry Os | =10.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/blackberry
- canonical/blackberry blackberry world
- version/blackberry blackberry world/5.1.0.52
- canonical/blackberry blackberry os
- version/blackberry blackberry os/10.3.0
- version/blackberry blackberry world/5.0.0.262
- version/blackberry blackberry os/10.2.1
- version/blackberry blackberry world/5.0.0.261
- version/blackberry blackberry os/10.2.0