CVE-2014-2389

2014-04-1204:37:31

CWE-119

mitre

web.nvd.nist.gov

cve-2014-2389

buffer overflow

qconndoor

blackberry z10

remote code execution

nvd

tcp session

wireless network

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.061

Percentile

93.5%

JSON

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network.

Affected configurations

Nvd

Node

blackberryblackberry_osMatch10.1.0.2312

AND

blackberryblackberry_z10Match-

VendorProductVersionCPE
blackberryblackberry_os10.1.0.2312cpe:2.3:o:blackberry:blackberry_os:10.1.0.2312:*:*:*:*:*:*:*
blackberryblackberry_z10-cpe:2.3:h:blackberry:blackberry_z10:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
blackberry	blackberry_os	10.1.0.2312	cpe:2.3:o:blackberry:blackberry_os:10.1.0.2312:::::::*
blackberry	blackberry_z10	-	cpe:2.3:h:blackberry:blackberry_z10:-:::::::*