PT-2009-6159 · Blackberry · Blackberry 8800+1

Published 2009-11-16 · Updated 2018-10-10 · CVE-2009-3944

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BlackBerry Browser on the BlackBerry 8800

Description The issue allows remote attackers to cause a denial of service, resulting in an application hang. This is achieved through a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property.

Recommendations For the BlackBerry 8800, consider disabling JavaScript as a temporary workaround until a patch is available. Restrict access to the setHomePage method to minimize the risk of exploitation. Avoid using DHTML behavior properties in the affected browser until the issue is resolved.

Fix

Related Identifiers

CVE-2009-3944

Affected Products

Blackberry 8800

Blackberry Browser

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2009-3944 · Security Note
• http://securityfocus.com/archive/1/507759/100/0/threaded · Note