CVE-2009-2646

2022-10-0316:24:07

[email protected]

web.nvd.nist.gov

cve-2009-2646

pdf distiller

blackberry enterprise server

remote attackers

denial of service

arbitrary code

crafted file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.284 Low

EPSS

Percentile

96.9%

JSON

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.

Affected configurations

NVD

Node

rimblackberry_enterprise_serverMatch4.1

rimblackberry_enterprise_serverMatch4.1sp2

rimblackberry_enterprise_serverMatch4.1sp2domino

rimblackberry_enterprise_serverMatch4.1sp3

rimblackberry_enterprise_serverMatch4.1.3

rimblackberry_enterprise_serverMatch4.1.4

rimblackberry_enterprise_serverMatch4.1.5

rimblackberry_enterprise_serverMatch4.1.6

rimblackberry_enterprise_serverMatch4.1.6mr4

rimblackberry_professional_softwareMatch4.1.4

CPENameOperatorVersion
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.3
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.4
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.5
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.6
rim:blackberry_professional_softwarerim blackberry professional softwareeq4.1.4

CPE	Name	Operator	Version
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.3
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.4
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.5
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.6
rim:blackberry_professional_software	rim blackberry professional software	eq	4.1.4