CVE-2005-2344

2006-01-0923:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2005-2344

blackberry

attachment service

research in motion

rim

bes

denial of service

heap-based buffer overflow

png

nvd

6.6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

77.9%

JSON

The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.

Affected configurations

NVD

Node

rimblackberry_enterprise_serverMatch4.0

rimblackberry_enterprise_serverMatch4.0_sp1

rimblackberry_enterprise_serverMatch4.0_sp2

CPENameOperatorVersion
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0_sp1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0_sp2

CPE	Name	Operator	Version
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0_sp1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0_sp2