9.3

CVE-2009-4778

EPSS 2.37%
Veröffentlicht 21.04.2010 14:30:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rim ≫ Blackberry Enterprise Server Version4.1.3

Rim ≫ Blackberry Enterprise Server Version4.1.4

Rim ≫ Blackberry Enterprise Server Version4.1.5

Rim ≫ Blackberry Enterprise Server Version4.1.6

Rim ≫ Blackberry Enterprise Server Version4.1.7

Rim ≫ Blackberry Enterprise Server Version5.0.0

Rim ≫ Blackberry Professional Software Version4.1.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.37%	0.844

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://secunia.com/advisories/37562

Vendor Advisory

http://www.blackberry.com/btsc/KB19860

Patch

Vendor Advisory

http://www.securityfocus.com/bid/37167

http://www.securitytracker.com/id?1023258

http://www.vupen.com/english/advisories/2009/3372

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-4778

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4778

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4778

EUVD