BlackBerry < 10.2.0.1055 qconnDoor Buffer Overflow

high Nessus Plugin ID 73439

Language:

Synopsis

The version of BlackBerry 10 OS is affected by a buffer overflow vulnerability.

Description

The mobile device uses a version of BlackBerry 10 OS that is older than version 10.2.0.1055. It is, therefore, affected by a buffer overflow error related to the 'qconnDoor' service. The vulnerability could allow denial of service attacks and possibly arbitrary code execution.

Note that this plugin has relied solely on the version of the installed OS and has not attempted to verify the status of the 'qconnDoor' service.

Solution

Upgrade to BlackBerry 10.2.0.1055 or later.

Alternatively, refer to the vendor's advisory for mitigation steps involving development mode, Wi-Fi and safely using USB functionality.

Plugin Details

Severity: High

ID: 73439

File Name: blackberry_10_2_0_1055.nbin

Version: 1.96

Type: local

Family: Mobile Devices

Published: 4/9/2014

Updated: 9/4/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.4

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:blackberry:blackberry_os

Required KB Items: mdm/dependency/unlocked

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/8/2014

Vulnerability Publication Date: 4/8/2014

Reference Information

CVE: CVE-2014-1468, CVE-2014-2389

BID: 66702, 66713

Detections

Analytics