Lucene search

[email protected]CVE-2008-3246

HistoryJul 21, 2008 - 4:41 p.m.

CVE-2008-3246

2008-07-2116:41:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-3246

pdf distiller

blackberry

unite

enterprise server

remote code execution

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.284 Low

EPSS

Percentile

96.9%

JSON

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

Affected configurations

NVD

Node

blackberryenterprise_serverMatch4.1sp3

blackberryenterprise_serverMatch4.1.3

blackberryenterprise_serverMatch4.1.4

blackberryenterprise_serverMatch4.1.5

blackberryuniteMatch1.0sp1

blackberryuniteMatch1.0.1

rimblackberry_enterprise_serverMatch4.1.3

rimblackberry_enterprise_serverMatch4.1.4

rimblackberry_enterprise_serverMatch4.1.5

rimblackberry_enterprise_server_for_domino

rimblackberry_enterprise_server_for_exchange

rimblackberry_enterprise_server_for_novell_groupwise

rimblackberry_uniteMatch1.0sp1

rimblackberry_uniteMatch1.0.1

CPENameOperatorVersion
blackberry:enterprise_serverblackberry enterprise servereq4.1
blackberry:enterprise_serverblackberry enterprise servereq4.1.3
blackberry:enterprise_serverblackberry enterprise servereq4.1.4
blackberry:enterprise_serverblackberry enterprise servereq4.1.5
blackberry:uniteblackberry uniteeq1.0
blackberry:uniteblackberry uniteeq1.0.1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.3
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.4
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.5
rim:blackberry_enterprise_server_for_dominorim blackberry enterprise server for dominoeq*

CPE	Name	Operator	Version
blackberry:enterprise_server	blackberry enterprise server	eq	4.1
blackberry:enterprise_server	blackberry enterprise server	eq	4.1.3
blackberry:enterprise_server	blackberry enterprise server	eq	4.1.4
blackberry:enterprise_server	blackberry enterprise server	eq	4.1.5
blackberry:unite	blackberry unite	eq	1.0
blackberry:unite	blackberry unite	eq	1.0.1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.3
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.4
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.5
rim:blackberry_enterprise_server_for_domino	rim blackberry enterprise server for domino	eq	*

Rows per page:

1-10 of 141

References

secunia.com/advisories/31092

secunia.com/advisories/31141

www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html

www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html

www.kb.cert.org/vuls/id/289235

www.securitytracker.com/id?1020505

www.vupen.com/english/advisories/2008/2108/references

exchange.xforce.ibmcloud.com/vulnerabilities/43840

exchange.xforce.ibmcloud.com/vulnerabilities/43843

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.284 Low

EPSS

Percentile

96.9%

JSON

Related for CVE-2008-3246

prion4 nessus1 nvd4 cvelist4 cve3