Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterp…

CVSS

9.3

Critical

EPSS

0.04

p89

Published

2009-01-01

Updated

2009-01-01

Description

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646.

Affected products

Blackberry_enterprise_server

CVSS vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Timeline

2009-01-01

Published

2009-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: N

Network (N)

Attack Complexity

AC: M

Medium

Authentication

Au: N

None (N)

Confidentiality Impact

C: C

Complete

Integrity Impact

I: C

Complete

Availability Impact

A: C

Complete

Exploit indicators

EPSS

0.043 · p89

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Rim

Blackberry Enterprise Server Blackberry Professional Software

Product	Vendor	Status
blackberry_enterprise_server	*	Tracked
blackberry_professional_software	*	Tracked

Source databases

CVE