CVE-2011-1416

The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:rim:blackberry_torch_9800_firmware:6.0.0.246:*:*:*:*:*:*:*

cpe:2.3:h:rim:blackberry_torch_9800:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:26

Type	Values Removed	Values Added
References	~~() http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 -~~	() http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 -
References	~~() http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401 -~~	() http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401 -

Information

Published : 2011-03-11 17:55

Updated : 2024-11-21 01:26

NVD link : CVE-2011-1416

Mitre link : CVE-2011-1416

CVE.ORG link : CVE-2011-1416

JSON object : View

Products Affected

rim

blackberry_torch_9800_firmware
blackberry_torch_9800

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2011-1416", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-03-11T17:55:03.727", "references": [{"url": "http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011", "source": "cve@mitre.org"}, {"url": "http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401", "source": "cve@mitre.org"}, {"url": "http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011."}, {"lang": "es", "value": "Research In Motion (RIM) BlackBerry 9800 Torch con firmware v6.0.0.246 permite a los atacantes leer el contenido de posiciones de memoria a trav\u00e9s de vectores desconocidos, como lo demuestran Vincenzo Iozzo, Pinckaers Willem, y Ralf-Philipp Weinmann durante un concurso Pwn2Own en CanSecWest 2011."}], "lastModified": "2024-11-21T01:26:15.773", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rim:blackberry_torch_9800_firmware:6.0.0.246:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C295C9D4-54E7-44C8-98B6-8E0588D8FAA0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:rim:blackberry_torch_9800:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE6974E3-F348-4C8C-B199-4E680D6CB0E7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}