Vulnerabilities > Blackberry > Blackberry Link > 1.1.1.41
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-07-20 | CVE-2015-4111 | Improper Input Validation vulnerability in Blackberry Link mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file. | 6.8 |
| 2013-11-18 | CVE-2013-3694 | Cross-Site Request Forgery (CSRF) vulnerability in Blackberry Link BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding. | 6.8 |
| 2013-11-18 | CVE-2013-6798 | Permissions, Privileges, and Access Controls vulnerability in Blackberry Link BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694. | 5.8 |