9.3
CVE-2009-0219
- EPSS 4.89%
- Veröffentlicht 21.01.2009 01:30:00
- Zuletzt bearbeitet 16.06.2026 23:04:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Research In Motion Limited ≫ Blackberry Enterprise Server Version4.1.3
Research In Motion Limited ≫ Blackberry Enterprise Server Version4.1.4
Research In Motion Limited ≫ Blackberry Enterprise Server Version4.1.5
Research In Motion Limited ≫ Blackberry Enterprise Server Version4.1.6
Research In Motion Limited ≫ Blackberry Professional Software Version4.1.4
Research In Motion Limited ≫ Blackberry Unite Version <= 1.0.3
Research In Motion Limited ≫ Blackberry Unite Version1.0
Research In Motion Limited ≫ Blackberry Unite Version1.0.1
Research In Motion Limited ≫ Blackberry Unite Version1.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.89% | 0.909 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://secunia.com/advisories/33534
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766
http://www.securityfocus.com/bid/33250
http://www.securitytracker.com/id?1021559