9.3

CVE-2009-2646

EPSS 3.61%
Veröffentlicht 30.07.2009 19:30:00
Zuletzt bearbeitet 16.06.2026 23:09:54
Erkennungen
Login

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 4

NVD 10 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rim ≫ Blackberry Enterprise Server Version 4.1

Rim ≫ Blackberry Enterprise Server Version 4.1 Update sp2

Rim ≫ Blackberry Enterprise Server Version 4.1 Update sp2 Edition domino

Rim ≫ Blackberry Enterprise Server Version 4.1 Update sp3

Rim ≫ Blackberry Enterprise Server Version 4.1.3

Rim ≫ Blackberry Enterprise Server Version 4.1.4

Rim ≫ Blackberry Enterprise Server Version 4.1.5

Rim ≫ Blackberry Enterprise Server Version 4.1.6

Rim ≫ Blackberry Enterprise Server Version 4.1.6 Update mr4

Rim ≫ Blackberry Professional Software Version 4.1.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.61%	0.88

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.blackberry.com/btsc/KB17953

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-2646

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2646

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2646

EUVD