VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 25, 2014· Updated Jun 17, 2026

CVE-2014-6611

CVE-2014-6611

Description

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Blackberry/Blackberry World2 versions
    cpe:2.3:a:blackberry:blackberry_world:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:blackberry:blackberry_world:*:*:*:*:*:*:*:*range: <=5.1.0.52
    • (no CPE)range: <5.0.0.262, <5.0.0.263, <5.1.0.53
  • Blackberry/Blackberry OS3 versions
    cpe:2.3:o:blackberry:blackberry_os:10.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:blackberry:blackberry_os:10.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:blackberry:blackberry_os:10.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:blackberry:blackberry_os:10.3.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.