Severity: : Critical
  CVE Kennungen: : CVE-2009-0305
  Advisory Date: 15 lutego 2011

  DESCRIPTION

 Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.

  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003288
  Trend Micro Deep Security DPI Rule Name: 1003288 - Research In Motion BlackBerry Application Web Loader ActiveX Control Buffer Overflow

  AFFECTED SOFTWARE AND VERSION:

  • research_in_motion_limited blackberry_application_web_loader 1.0