Описание
Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:rim:blackberry_desktop_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry_device_software:4.0:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:rim:blackberry:7100g:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7100i:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7100r:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7100t:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7100v:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7100x:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7105t:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7130e:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7230_3.7.1_.41:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7230_3.8:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7230_4.0:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7250:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7280:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7290:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7520:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7730:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7750:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:7780:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:8700c:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:8700f:*:*:*:*:*:*:*
cpe:2.3:a:rim:blackberry:8700r:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.01951
Низкий
2.6 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed.
EPSS
Процентиль: 83%
0.01951
Низкий
2.6 Low
CVSS2
Дефекты
NVD-CWE-Other