PT-2005-3268 · Blackberry · Blackberry Handheld Web Browser

Fx · Published 2005-12-31 · Updated 2011-03-08 · CVE-2005-2343

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BlackBerry Handheld web browser versions prior to 4.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in the device hanging. This occurs when a Java Application Description (JAD) file contains a long application name and vendor string, preventing a browser dialog from being properly dismissed.

Recommendations For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2343

Affected Products

Blackberry Handheld Web Browser

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-2343 · Security Note
• http://blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/?nodeid=1167791 · Note
• http://vupen.com/english/advisories/2006/0011 · Note
• http://securitytracker.com/id?1015428 · Note
• http://kb.cert.org/vuls/id/829400 · Note
• http://securityfocus.com/bid/16099 · Note