{"api_version":"1","generated_at":"2026-07-23T09:38:17+00:00","cve":"CVE-2009-0305","urls":{"html":"https://cve.report/CVE-2009-0305","api":"https://cve.report/api/cve/CVE-2009-0305.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0305","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0305"},"summary":{"title":"CVE-2009-0305","description":"Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-02-10 22:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.microsoft.com/technet/security/advisory/960715.mspx","name":"http://www.microsoft.com/technet/security/advisory/960715.mspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Your request has been blocked. This could be\r\n                        due to several reasons.","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"http://blackberry.com/btsc/KB16248","name":"http://blackberry.com/btsc/KB16248","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"View Document","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/131100","name":"http://www.kb.cert.org/vuls/id/131100","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"VU#131100 - RIM BlackBerry Application Web Loader ActiveX stack buffer overflow","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/33847","name":"http://secunia.com/advisories/33847","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"BlackBerry Application Web Loader ActiveX Control Buffer Overflow - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33663","name":"http://www.securityfocus.com/bid/33663","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"BlackBerry Application Web Loader ActiveX Control Remote Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/51833","name":"http://osvdb.org/51833","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0305","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0305","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"305","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"internet_explorer","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"305","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"research_in_motion_limited","cpe5":"blackberry_application_web_loader","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:31:25.476Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33663","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33663"},{"name":"33847","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33847"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.microsoft.com/technet/security/advisory/960715.mspx"},{"name":"VU#131100","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/131100"},{"name":"51833","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/51833"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blackberry.com/btsc/KB16248"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-02-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-02-17T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33663","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33663"},{"name":"33847","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33847"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.microsoft.com/technet/security/advisory/960715.mspx"},{"name":"VU#131100","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/131100"},{"name":"51833","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/51833"},{"tags":["x_refsource_CONFIRM"],"url":"http://blackberry.com/btsc/KB16248"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-0305","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33663","refsource":"BID","url":"http://www.securityfocus.com/bid/33663"},{"name":"33847","refsource":"SECUNIA","url":"http://secunia.com/advisories/33847"},{"name":"http://www.microsoft.com/technet/security/advisory/960715.mspx","refsource":"CONFIRM","url":"http://www.microsoft.com/technet/security/advisory/960715.mspx"},{"name":"VU#131100","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/131100"},{"name":"51833","refsource":"OSVDB","url":"http://osvdb.org/51833"},{"name":"http://blackberry.com/btsc/KB16248","refsource":"CONFIRM","url":"http://blackberry.com/btsc/KB16248"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-0305","datePublished":"2009-02-10T22:13:00.000Z","dateReserved":"2009-01-27T00:00:00.000Z","dateUpdated":"2024-08-07T04:31:25.476Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-02-10 22:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:research_in_motion_limited:blackberry_application_web_loader:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E3018F34-2088-4F41-B83E-C80D5912CC40"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"305","Ordinal":"1","Title":"CVE-2009-0305","CVE":"CVE-2009-0305","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"305","Ordinal":"1","NoteData":"Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.","Type":"Description","Title":"CVE-2009-0305"},{"CveYear":"2009","CveId":"305","Ordinal":"2","NoteData":"2009-02-10","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"305","Ordinal":"3","NoteData":"2009-02-17","Type":"Other","Title":"Modified"}]}}}