EUVD-2013-3625

Malware in sbrugna...

CVE-2014-6611

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigge...

CVE-2014-6611

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigge...

CVE-2014-6611

The CVE-2014-6611 issue affects the BlackBerry World app prior to 5.0.0.262 on BlackBerry 10 OS 10.2.0, prior to 5.0.0.263 on OS 10.2.1, and prior to 5.1.0.53 on OS 10.3.0. The vulnerability arises from improper validation of download/update requests, enabling user-assisted man‑in‑the‑middle atta...

BlackBerry 10 OS 'qconnDoor'服务栈缓冲区溢出漏洞

Bugtraq ID:66702 CVE ID:CVE-2014-1468 BlackBerry 10 OS是由Research In Motion公司所研发的行动操作系统。 BlackBerry 10 OS 10.2.0.1055之前版本在实现上存在栈缓冲区溢出漏洞，攻击者可利用此漏洞在受影响设备上下文中执行任意代码。 0 BlackBerry BlackBerry 10 OS 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.blackberry.com/...

Cross site request forgery (csrf)

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of...

CVE-2013-3692

BlackBerry 10 OS vulnerability CVE-2013-3692 affects Z10 devices prior to 10.0.10.648 where weak BlackBerry Protect permissions can enable privilege escalation if a malicious app exploits a remote password-reset flow. Exploitation requires physical access to the device and a user-installed crafte...

CVE-2013-3692

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of...

BlackBerry Z10 Privilege Escalation Security Vulnerability

BlackBerry has released a security update resolving an escalation of privilege vulnerability that existed in “BlackBerry Protect” enabled devices running version 10.0.10.261 and earlier operating systems. The company says that version 10.0.9.2743 is not affected and that they have found no eviden...

BlackBerry Warns of Z10, PlayBook Security Vulnerabilities

BlackBerry’s security incident response team has issued two advisories warning Z10 smartphone and PlayBook tablet users to upgrade to the latest version of the operating system and software on both platforms. The patches address a remote code-execution vulnerability in the Adobe Flash Player...