CVE-2014-2389 Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers....
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry os | = 10.1.0.2312 | No fix listed |
| blackberry z10 | All versions | No fix listed |
References
- 20140408 BlackBerry Z 10 - Buffer Overflow in qconnDoor [MZ-13-05] exploit mailing-list