CVEvulnerability
CVE-2009-2643
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.
Affected configurations
• rim blackberry enterprise server 4.1.3
• rim blackberry enterprise server 4.1.4
• rim blackberry enterprise server 4.1.5
• rim blackberry enterprise server 4.1.6
• rim blackberry enterprise server 5.0
• rim blackberry professional software 4.1.4
References
- http://secunia.com/advisories/35254 Vendor Advisory
- http://www.blackberry.com/btsc/KB18327 Patch, Vendor Advisory
- http://www.osvdb.org/54767 www.osvdb.org
- http://www.securityfocus.com/bid/35102 www.securityfocus.com
- http://www.securitytracker.com/id?1022295 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1429 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50755 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/35254 Vendor Advisory
- http://www.blackberry.com/btsc/KB18327 Patch, Vendor Advisory
- http://www.osvdb.org/54767 www.osvdb.org
- http://www.securityfocus.com/bid/35102 www.securityfocus.com
- http://www.securitytracker.com/id?1022295 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1429 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50755 exchange.xforce.ibmcloud.com