Blackberry » Blackberry Link : Security Vulnerabilities, CVEs, CVSS score >= 1
mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
Max CVSS
6.8
EPSS Score
3.59%
Published
2015-07-20
Updated
2017-09-22
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694.
Max CVSS
5.8
EPSS Score
0.21%
Published
2013-11-18
Updated
2017-08-29
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding.
Max CVSS
6.8
EPSS Score
0.13%
Published
2013-11-18
Updated
2013-11-19
3 vulnerabilities found