PT-2010-1587 · Rim · Blackberry Enterprise Server+1

Publicado 2010-04-21 · Atualizado 2010-04-22 · CVE-2009-4778

Mitre

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646.

Correção

Identificadores relacionados

CVE-2009-4778

Produtos afetados

Blackberry Enterprise Server

Blackberry Professional

Referências · 7

• http://vupen.com/english/advisories/2009/3372 · Aviso do Fabricante
• http://securitytracker.com/id?1023258 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4778 · Nota de Segurança
• http://secunia.com/advisories/37562 · Aviso do Fabricante
• http://blackberry.com/btsc/KB19860 · Aviso do Fabricante
• http://blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB19860 · Nota
• http://securityfocus.com/bid/37167 · Nota