Unscored severity · published Sep 15, 2010
CVE-2010-2600
Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Blackberry.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BD
Blackberry Desktop Software · Rim
through 6.0; 3.0; 4.0; 4.5; 4.6; 4.7; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2600
Vendor Advisory
http://secunia.com/advisories/41346
Vendor Advisory
http://secunia.com/advisories/41398
Patch
http://www.blackberry.com/btsc/KB24242
www.securityfocus.com
http://www.securityfocus.com/bid/43139
www.securitytracker.com
http://www.securitytracker.com/id?1024425
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6843
More from Blackberry Desktop Software
–
CVE-2010-2603
RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt…
–
CVE-2010-3741
The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via…
–
CVE-2009-0306
Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before…