VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 25, 2014· Updated May 6, 2026

CVE-2014-6611

CVE-2014-6611

Description

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.

Affected products

4
  • Blackberry/Blackberry World
    cpe:2.3:a:blackberry:blackberry_world:*:*:*:*:*:*:*:*
    Range: <=5.1.0.52
  • Blackberry/Blackberry Os3 versions
    cpe:2.3:o:blackberry:blackberry_os:10.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:blackberry:blackberry_os:10.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:blackberry:blackberry_os:10.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:blackberry:blackberry_os:10.3.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.