CVE-2009-0306

Опубликовано: 04 нояб. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained from third party information.

Ссылки

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36903
http://www.vupen.com/english/advisories/2009/3133
Patch
Vendor Advisory
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19701
Patch
Vendor Advisory
http://www.securityfocus.com/bid/36903
http://www.vupen.com/english/advisories/2009/3133
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:rim:blackberry_desktop_software:*:*:*:*:*:*:*:*

Версия до 5.0 (включая)

cpe:2.3:a:ibm:lotus_notes_intellisync:*:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04329

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-f6hj-q6pv-h6q9

github

почти 4 года назад