PT-2005-3269 · Blackberry+1 · Blackberry Enterprise Server+1

Fx · Published 2005-12-31 · Updated 2017-07-11 · CVE-2005-2344

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 4.0 through 4.0 Service Pack 2

Description The issue allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow in the BlackBerry Attachment Service.

Recommendations For versions 4.0 through 4.0 Service Pack 2, apply the necessary patches or updates to fix the heap-based buffer overflow issue in the BlackBerry Attachment Service.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2005-2344

Affected Products

Blackberry Enterprise Server

Portable Network Graphics

References · 7

• http://blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794 · Vendor Advisory
• http://secunia.com/advisories/18393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2344 · Security Note
• http://vupen.com/english/advisories/2006/0127 · Vendor Advisory
• http://kb.cert.org/vuls/id/646976 · Note
• http://securityfocus.com/bid/16204 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24063 · Note