CVE-2009-0305

2009-02-1022:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.314

Percentile

97.1%

JSON

Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.

Affected configurations

Nvd

Node

research_in_motion_limitedblackberry_application_web_loaderMatch1.0

AND

microsoftinternet_explorer

VendorProductVersionCPE
research_in_motion_limitedblackberry_application_web_loader1.0cpe:2.3:a:research_in_motion_limited:blackberry_application_web_loader:1.0:*:*:*:*:*:*:*
microsoftinternet_explorer*cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
research_in_motion_limited	blackberry_application_web_loader	1.0	cpe:2.3:a:research_in_motion_limited:blackberry_application_web_loader:1.0:::::::*
microsoft	internet_explorer	*	cpe:2.3:a:microsoft:internet_explorer::::::::