Will Dormann has reported a vulnerability in RIM's TeamOn Import Object ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in TOImport.dll when handling the "SetLanguage()" method. This can be exploited to cause a buffer overflow via a specially crafted argument passed to the said method.

Successful exploitation may allow execution of arbitrary code.

Solution
Reportedly, Microsoft Security Bulletin MS07-027 sets the kill-bit for this ActiveX control. A patched version is also available from the vendor.
Further details available in Customer Area

Provided and/or discovered by
Will Dormann, CERT/CC

Changelog
Further details available in Customer Area

Original Advisory
US-CERT VU#869641:
http://www.kb.cert.org/vuls/id/869641

Research In Motion:
http://blackberry.com/btsc/KB13142

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area