CVE-2010-2599

The CVE-2010-2599 entry affects BlackBerry Device Software older than 6.0.0, where the browser can be brought to a partial DoS by viewing a crafted web page. TEHTRI-Security/SECURITYVULNS:DOC:25534 indicates a patch was released by BlackBerry to address this vulnerability (Browser DoS). The under...

RIM Issues Fix For Remote Bug in BlackBerry Enterprise Server

Research in Motion, the maker of the BlackBerry devices and software, has released a patch for a flaw in its BlackBerry Enterprise Server software that could enable an attacker to execute arbitrary code on an affected server. The vulnerability in the BES software specifically lies in the PDF...

CVE-2010-2604: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2010-2599: Undefined Security Weakness

Unspecified vulnerability in Research In Motion RIM BlackBerry Device Software before 6.0.0 allows remote attackers to cause a denial of service browser hang via a crafted web page...

Insecure Loading of Dynamic Link Libraries in Windows Applications

US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...

CVE-2010-3934

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

BlackBerry Desktop Software Security Bypass Vulnerability

This host has BlackBerry Desktop Software installed and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbblackberrydesktopsoftwaresecbypassvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ BlackBerry Desktop Software Security Bypass Vulnerability Authors: Antu Sanadi Update...

CVE-2010-3741: Undefined Security Weakness

The offline backup mechanism in Research In Motion RIM BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack...

2daybiz Video Community Portal SQL Injection / Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

iClone - SQL Injection

iClone - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author :...

Blog Pixel Motion Backup Disclosure

======================================================================================== | Title : Blog Pixel Motion = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Ce blog a été mis à disposition par Pixel Motion | Tested on: windows SP2...

CVE-2009-4778: Undefined Security Weakness

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of...

CVE-2009-3944

This CVE concerns the BlackBerry Browser on the BlackBerry 8800. It describes a remotely triggerable denial of service caused by a JavaScript loop that configures the home page via the setHomePage method and a DHTML behavior property. The statement implies the vulnerability arises from how the pa...

Critical Flaw in BlackBerry Desktop Manager Software

Research in Motion RIM has shipped a patch to cover a gaping hole in its BlackBerry Desktop Manager software. The vulnerability, which exists in a Lotus Notes Intellisync DLL that the BlackBerry Desktop Manager uses, allows a malicious user to perform an attack that leverages social engineering t...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...

CVE-2009-0306: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

The CVE-2009-3038 issue affects the ActiveX control in lnresobject.dll 7.1.1.119 used by the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11. The vulnerability allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the ...