9.3

CVE-2009-4778

EPSS 4.32%
Veröffentlicht 21.04.2010 14:30:00
Zuletzt bearbeitet 16.06.2026 23:14:20
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rim ≫ Blackberry Enterprise Server Version4.1.3

Rim ≫ Blackberry Enterprise Server Version4.1.4

Rim ≫ Blackberry Enterprise Server Version4.1.5

Rim ≫ Blackberry Enterprise Server Version4.1.6

Rim ≫ Blackberry Enterprise Server Version4.1.7

Rim ≫ Blackberry Enterprise Server Version5.0.0

Rim ≫ Blackberry Professional Software Version4.1.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.32%	0.899

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/37562

Vendor Advisory

http://www.blackberry.com/btsc/KB19860

Patch

Vendor Advisory

http://www.securityfocus.com/bid/37167

http://www.securitytracker.com/id?1023258

http://www.vupen.com/english/advisories/2009/3372

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-4778

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4778

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4778

EUVD