Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
BID:45754
Info
Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
| Bugtraq ID: | 45754 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-2599 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2011 12:00AM |
| Updated: | Jan 11 2011 12:00AM |
| Credit: | Laurent Oudot of TEHTRI Security |
| Vulnerable: |
Research In Motion Blackberry Device Software 4.7.1 .57 Research In Motion Blackberry Device Software 4.7.1 Research In Motion Blackberry Device Software 4.7 .179 Research In Motion Blackberry Device Software 4.7 Research In Motion Blackberry Device Software 4.6.1 .309 Research In Motion Blackberry Device Software 4.6.1 Research In Motion Blackberry Device Software 4.6 .303 Research In Motion Blackberry Device Software 4.6 Research In Motion Blackberry Device Software 4.5 .173 Research In Motion Blackberry Device Software 4.5 Research In Motion Blackberry Device Software 4.0.2 Research In Motion Blackberry Device Software 4.0.1 .83 Research In Motion Blackberry Device Software 4.0.1 .108 Research In Motion Blackberry Device Software 4.0 Research In Motion Blackberry Device Software 5.0 Research In Motion BlackBerry Desktop Software (Mac OS) 2.0 Research In Motion BlackBerry Desktop Software (Mac OS) 1.0 Research In Motion Blackberry Desktop Software 6.0.1 Research In Motion Blackberry Desktop Software 6.0 Research In Motion Blackberry Desktop Software 5.0.1 Research In Motion Blackberry Desktop Software 5.0 Research In Motion Blackberry Desktop Software 4.7 Research In Motion Blackberry Desktop Software 4.6 Research In Motion Blackberry Desktop Software 4.5 Research In Motion Blackberry Desktop Software 4.0 Research In Motion Blackberry Desktop Software 3.0 |
| Not Vulnerable: |
Research In Motion Blackberry Device Software 6.0 |
Discussion
Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
Research In Motion BlackBerry Device Software is prone to a remote denial-of-service vulnerability.
Successful exploits allow an attacker to crash the affected browser, resulting in a denial-of-service condition.
Versions prior to Research In Motion BlackBerry Device Software 6.0.0 are vulnerable.
Research In Motion BlackBerry Device Software is prone to a remote denial-of-service vulnerability.
Successful exploits allow an attacker to crash the affected browser, resulting in a denial-of-service condition.
Versions prior to Research In Motion BlackBerry Device Software 6.0.0 are vulnerable.
Exploit / POC
Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious web page.
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious web page.
Solution / Fix
Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
Research In Motion BlackBerry Device Software Remote Denial Of Service Vulnerability
References:
References:
- Research In Motion Homepage (Research In Motion)
- Partial Denial of Service (DoS) in the BlackBerry browser application (BlackBerry)