QwikSec

Security Database

CVE

CWE

Training

CVE-2009-0219

Published: Jan 21, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118

x_refsource_CONFIRM

20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller Uninitialized Memory Vulnerability

third-party-advisory

x_refsource_IDEFENSE

vdb-entry

x_refsource_SECTRACK

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.