Read the docs
TI-2005-02220 Aliases CVE-2005-2343GHSA-qhw9-28qw-h5h8

Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before…

Priority LOW 18Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed.

Why it matters now

EPSS 0.02582 85th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:rim:blackberry_desktop_manager:4.0:*:*:*:*:*:*:*4.0VulnerableRim
cpe:2.3:a:rim:blackberry_device_software:4.0:*:*:*:*:*:*:*4.0VulnerableRim
cpe:2.3:a:rim:blackberry:7100g:*:*:*:*:*:*:*7100gVulnerableRim
cpe:2.3:a:rim:blackberry:7100i:*:*:*:*:*:*:*7100iVulnerableRim
cpe:2.3:a:rim:blackberry:7100r:*:*:*:*:*:*:*7100rVulnerableRim
cpe:2.3:a:rim:blackberry:7100t:*:*:*:*:*:*:*7100tVulnerableRim
cpe:2.3:a:rim:blackberry:7100v:*:*:*:*:*:*:*7100vVulnerableRim
cpe:2.3:a:rim:blackberry:7100x:*:*:*:*:*:*:*7100xVulnerableRim
cpe:2.3:a:rim:blackberry:7105t:*:*:*:*:*:*:*7105tVulnerableRim
cpe:2.3:a:rim:blackberry:7130e:*:*:*:*:*:*:*7130eVulnerableRim
  • cpe:2.3:a:rim:blackberry_desktop_manager:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry_device_software:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100g:*:*:*:*:*:*:* Versions 7100g Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100i:*:*:*:*:*:*:* Versions 7100i Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100r:*:*:*:*:*:*:* Versions 7100r Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100t:*:*:*:*:*:*:* Versions 7100t Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100v:*:*:*:*:*:*:* Versions 7100v Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7100x:*:*:*:*:*:*:* Versions 7100x Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7105t:*:*:*:*:*:*:* Versions 7105t Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7130e:*:*:*:*:*:*:* Versions 7130e Vulnerable ·Rim
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rim:blackberry:7230_3.7.1_.41:*:*:*:*:*:*:*7230_3.7.1_.41VulnerableRim
cpe:2.3:a:rim:blackberry:7230_3.8:*:*:*:*:*:*:*7230_3.8VulnerableRim
cpe:2.3:a:rim:blackberry:7230_4.0:*:*:*:*:*:*:*7230_4.0VulnerableRim
cpe:2.3:a:rim:blackberry:7250:*:*:*:*:*:*:*7250VulnerableRim
cpe:2.3:a:rim:blackberry:7280:*:*:*:*:*:*:*7280VulnerableRim
cpe:2.3:a:rim:blackberry:7290:*:*:*:*:*:*:*7290VulnerableRim
cpe:2.3:a:rim:blackberry:7520:*:*:*:*:*:*:*7520VulnerableRim
cpe:2.3:a:rim:blackberry:7730:*:*:*:*:*:*:*7730VulnerableRim
cpe:2.3:a:rim:blackberry:7750:*:*:*:*:*:*:*7750VulnerableRim
cpe:2.3:a:rim:blackberry:7780:*:*:*:*:*:*:*7780VulnerableRim
cpe:2.3:a:rim:blackberry:8700c:*:*:*:*:*:*:*8700cVulnerableRim
cpe:2.3:a:rim:blackberry:8700f:*:*:*:*:*:*:*8700fVulnerableRim
cpe:2.3:a:rim:blackberry:8700r:*:*:*:*:*:*:*8700rVulnerableRim
  • cpe:2.3:a:rim:blackberry:7230_3.7.1_.41:*:*:*:*:*:*:* Versions 7230_3.7.1_.41 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7230_3.8:*:*:*:*:*:*:* Versions 7230_3.8 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7230_4.0:*:*:*:*:*:*:* Versions 7230_4.0 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7250:*:*:*:*:*:*:* Versions 7250 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7280:*:*:*:*:*:*:* Versions 7280 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7290:*:*:*:*:*:*:* Versions 7290 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7520:*:*:*:*:*:*:* Versions 7520 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7730:*:*:*:*:*:*:* Versions 7730 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7750:*:*:*:*:*:*:* Versions 7750 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:7780:*:*:*:*:*:*:* Versions 7780 Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:8700c:*:*:*:*:*:*:* Versions 8700c Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:8700f:*:*:*:*:*:*:* Versions 8700f Vulnerable ·Rim
  • cpe:2.3:a:rim:blackberry:8700r:*:*:*:*:*:*:* Versions 8700r Vulnerable ·Rim

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-2343
  2. 2026-10-03 Alias added: GHSA-qhw9-28qw-h5h8

References

  • TI-2004-01473 RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a… CVSS 2.0MEDIUM 5.0
  • TI-2007-01383 The 4thPass browser (BlackBerry Browser) on the RIM BlackBerry 8100 (Pearl) before 4.2.1… CVSS 2.0MEDIUM 4.3

Sources