Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2010-10-14	CVE-2010-3934	Permissions, Privileges, and Access Controls vulnerability in RIM Blackberry Device Software 5.0.0.593 The browser in Research In Motion (RIM) BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an IFRAME element. network rim CWE-264	6.8
2009-09-29	CVE-2009-3477	Cryptographic Issues vulnerability in RIM Blackberry Device Software The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. network rim CWE-310	6.8