BlackBerry Desktop Software Lotus Notes Intellisync Arbitrary Code Execution
SECUNIA ADVISORY ID: SA37244
VERIFY ADVISORY: http://secunia.com/advisories/37244/
DESCRIPTION: A vulnerability has been reported in BlackBerry Desktop Software, which can be exploited by malicious people to compromise a user’s system.
The vulnerability is caused due to an unspecified error in the Lotus Notes Intellisync component (lnsresobject.dll). This can be exploited to potentially execute arbitrary code by tricking a user into visiting a malicious website.
The vulnerability is reported in versions prior to 5.0.1.
SOLUTION: Update to version 5.0.1: https://www.blackberry.com/Downloads/entry.do?code=A8BAA56554F96369AB93E4F3BB068C22
PROVIDED AND/OR DISCOVERED BY: The vendor credits OYXin of Nevis Labs, Aviram Networks, Inc.
ORIGINAL ADVISORY: http://blackberry.com/btsc/KB19701
———————————————————————-