QwikSec

Security Database

CVE

CWE

Training

CVE-2009-0176

Published: Jan 20, 2009

Modified: Sep 17, 2024

PUBLISHED

Description

Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119

x_refsource_CONFIRM

20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'bitmaps' Heap Overflow Vulnerability

third-party-advisory

x_refsource_IDEFENSE

20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'symWidths' Heap Overflow Vulnerability

third-party-advisory

x_refsource_IDEFENSE

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.