Here's the update that should be applied:
MS09-003: Vulnerability in Microsoft Exchange could allow remote code execution
BES should always be the same or greater than Exchange (CDO is 'backwards compatible').
Also, I would take a look to see if you may have more than one version of CDO.dll on your system (for example, one in C:\Program Files\Exchsrvr\bin and one in C:\Windows\system32). If so, delete the one in the system32 folder and re-register the one in the bin folder.
You may also want to cross-reference the timestamp of the error in the event log entry to the associated MAGT log file for that user to see a more specific error notification in the BES logs. That may help you figure out the real issue.