{"id": "CVE-2005-4848", "bulletinFamily": "NVD", "title": "CVE-2005-4848", "description": "Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.", "published": "2005-12-31T05:00:00", "modified": "2017-07-29T01:29:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-4848", "reporter": "cve@mitre.org", "references": ["http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html", "http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html", "http://www.vupen.com/english/advisories/2007/2419", "http://www.lemonde.fr/web/article/0,1-0@2-3208,36-777732,0.html", "https://exchange.xforce.ibmcloud.com/vulnerabilities/35241"], "cvelist": ["CVE-2005-4848"], "type": "cve", "lastseen": "2021-02-02T05:24:41", "edition": 6, "viewCount": 2, "enchantments": {"dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:39604"]}], "modified": "2021-02-02T05:24:41", "rev": 2}, "score": {"value": 8.4, "vector": "NONE", "modified": "2021-02-02T05:24:41", "rev": 2}, "vulnersScore": 8.4}, "cpe": ["cpe:/a:rim:blackberry_enterprise_server:4.0_sp1"], "affectedSoftware": [{"cpeName": "rim:blackberry_enterprise_server", "name": "rim blackberry enterprise server", "operator": "le", "version": "4.0_sp1"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:*:*:*:*:*:*"], "cwe": ["CWE-119"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:a:rim:blackberry_enterprise_server:4.0_sp1:*:*:*:*:*:*:*", "versionEndIncluding": "4.0_sp1", "vulnerable": true}], "operator": "OR"}]}, "extraReferences": [{"name": "http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html", "refsource": "CONFIRM", "tags": ["Patch"], "url": "http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html"}, {"name": "http://www.lemonde.fr/web/article/0,1-0@2-3208,36-777732,0.html", "refsource": "MISC", "tags": [], "url": "http://www.lemonde.fr/web/article/0,1-0@2-3208,36-777732,0.html"}, {"name": "blackberry-decompression-bo(35241)", "refsource": "XF", "tags": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35241"}, {"name": "ADV-2007-2419", "refsource": "VUPEN", "tags": [], "url": "http://www.vupen.com/english/advisories/2007/2419"}, {"name": "http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html", "refsource": "MISC", "tags": [], "url": "http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html"}], "immutableFields": []}

{"osvdb": [{"lastseen": "2017-04-28T13:20:35", "bulletinFamily": "software", "cvelist": ["CVE-2005-4848"], "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html</a>\nOther Advisory URL: http://www.lemonde.fr/web/article/0,1-0@2-3208,36-777732,0.html\nOther Advisory URL: http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html\nFrSIRT Advisory: ADV-2007-2419\n[CVE-2005-4848](https://vulners.com/cve/CVE-2005-4848)\n", "edition": 1, "modified": "2005-06-07T22:07:22", "published": "2005-06-07T22:07:22", "href": "https://vulners.com/osvdb/OSVDB:39604", "id": "OSVDB:39604", "title": "BlackBerry Enterprise Server Decompression Algorithm Packet Handling Remote Overflow", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}