PT-2009-6159 · Blackberry · Blackberry 8800+1

Publicado 2009-11-16 · Atualizado 2018-10-10 · CVE-2009-3944

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BlackBerry Browser on the BlackBerry 8800

Description The issue allows remote attackers to cause a denial of service, resulting in an application hang. This is achieved through a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property.

Recommendations For the BlackBerry 8800, consider disabling JavaScript as a temporary workaround until a patch is available. Restrict access to the setHomePage method to minimize the risk of exploitation. Avoid using DHTML behavior properties in the affected browser until the issue is resolved.

Correção

Identificadores relacionados

CVE-2009-3944

Produtos afetados

Blackberry 8800

Blackberry Browser

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2009-3944 · Nota de Segurança
• http://securityfocus.com/archive/1/507759/100/0/threaded · Nota