CVE-2010-2600

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-09-15 · updated 2026-06-16

Description

Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Blackberry.

Affected products

Rim Blackberry Desktop Software: through 6.0; 3.0, 4.0, 4.5, 4.6, 4.7, 5.0 (+1)

References

http://secunia.com/advisories/41346
http://secunia.com/advisories/41398
http://www.blackberry.com/btsc/KB24242
http://www.securityfocus.com/bid/43139
http://www.securitytracker.com/id?1024425
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6843
http://secunia.com/advisories/41346
http://secunia.com/advisories/41398
http://www.blackberry.com/btsc/KB24242
http://www.securityfocus.com/bid/43139
http://www.securitytracker.com/id?1024425
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6843

Get alerted when CVE-2010-2600 or the next vulnerability affects your stack