PT-2011-3112 · Blackberry · Blackberry Torch 9800

Published 2011-03-11 · Updated 2011-03-24 · CVE-2011-1416

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry Torch 9800 version 6.0.0.246

Description The issue allows attackers to read the contents of memory locations via unknown vectors. This was demonstrated by researchers during a Pwn2Own competition at CanSecWest 2011.

Recommendations For version 6.0.0.246, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-1416

Affected Products

Blackberry Torch 9800

References · 6

• https://ubuntu.com/security/CVE-2011-1416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1416 · Security Note
• https://cve.org/CVERecord?id=CVE-2011-1416 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-1416 · Vendor Advisory
• http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 · Note
• http://zdnet.com/blog/security/pwn2own-2011-blackberry-falls-to-webkit-browser-attack/8401 · Note