Lucene search

K
cve[email protected]CVE-2014-2389
HistoryApr 12, 2014 - 4:37 a.m.

CVE-2014-2389

2014-04-1204:37:31
CWE-119
web.nvd.nist.gov
17
cve-2014-2389
buffer overflow
qconndoor
blackberry z10
remote code execution
nvd
tcp session
wireless network

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.061 Low

EPSS

Percentile

93.5%

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network.

Affected configurations

NVD
Node
blackberryblackberry_osMatch10.1.0.2312
AND
blackberryblackberry_z10Match-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

Low

0.061 Low

EPSS

Percentile

93.5%