PT-2005-3269 · Blackberry+1 · Blackberry Enterprise Server+1

Fx · Publicado 2005-12-31 · Atualizado 2017-07-11 · CVE-2005-2344

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 4.0 through 4.0 Service Pack 2

Description The issue allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow in the BlackBerry Attachment Service.

Recommendations For versions 4.0 through 4.0 Service Pack 2, apply the necessary patches or updates to fix the heap-based buffer overflow issue in the BlackBerry Attachment Service.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2005-2344

Produtos afetados

Blackberry Enterprise Server

Portable Network Graphics

Referências · 7

• http://kb.cert.org/vuls/id/646976 · Nota
• http://securityfocus.com/bid/16204 · Nota
• http://blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794 · Aviso do Fabricante
• http://secunia.com/advisories/18393 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2344 · Nota de Segurança
• http://vupen.com/english/advisories/2006/0127 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24063 · Nota