The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 prior to 4.5.0.173, 4.6.0 prior to 4.6.0.303, 4.6.1 prior to 4.6.1.309, 4.7.0 prior to 4.7.0.179, and 4.7.1 prior to 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
rim blackberry device software 4.5.0 |
||
rim blackberry device software 4.6 |
||
rim blackberry device software 4.6.1 |
||
rim blackberry device software 4.7 |
||
rim blackberry device software 4.7.1 |
Vulmon