Vulnerability Description
mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
CVSS Score
6.8
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Blackberry | Blackberry Link | <= 1.2.3.52 |
Related Weaknesses (CWE)
References
- http://www.blackberry.com/btsc/KB37207Vendor Advisory
- http://www.securityfocus.com/bid/75950
- http://www.securitytracker.com/id/1032969
- http://www.blackberry.com/btsc/KB37207Vendor Advisory
- http://www.securityfocus.com/bid/75950
- http://www.securitytracker.com/id/1032969
FAQ
What is CVE-2015-4111?
CVE-2015-4111 is a vulnerability with a CVSS score of 6.8 (MEDIUM). mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.
How severe is CVE-2015-4111?
CVE-2015-4111 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-4111?
Check the references section above for vendor advisories and patch information. Affected products include: Blackberry Blackberry Link.