Intrusion Prevention

BlackBerry.Application.Web.Loader.Load.ActiveX.Access

Description

This indicates an attempt to exploit a stack-based buffer-overflow vulnerability in RIM BlackBerry Application Web Loader.
The vulnerability is caused by an error occurring when the vulnerable software handles malicious crafted arguments passed to "load" or "loadjad" methods. It allows a remote attacker to gain control of vulnerable systems.

Affected Products

BlackBerry Application Web Loader 1.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply patch, available from the website:
http://www.microsoft.com/technet/security/advisory/960715.mspx
Or set the kill bit of CLSID: {4788DE08-3552-49EA-AC8C-233DA52523B9}

CVE References

CVE-2009-0305