CVE-2006-0761

2006-02-1802:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

blackberry

attachment service

buffer overflow

rim

blackberry enterprise server

cve-2006-0761

remote code execution

microsoft word

wireless device

nvd

7.9 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.07 Low

EPSS

Percentile

93.9%

JSON

Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.

CPENameOperatorVersion
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0_sp1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0
rim:blackberry_enterprise_serverrim blackberry enterprise servereq2.2_sp2a
rim:blackberry_enterprise_serverrim blackberry enterprise servereq2.2
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0_sp2
rim:blackberry_enterprise_serverrim blackberry enterprise servereq2.2_sp3a
rim:blackberry_enterprise_serverrim blackberry enterprise servereq3.6
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.0_sp3
rim:blackberry_enterprise_serverrim blackberry enterprise servereq3.6_sp1a
rim:blackberry_enterprise_serverrim blackberry enterprise servereq2.2_sp4

CPE	Name	Operator	Version
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0_sp1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	2.2_sp2a
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	2.2
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0_sp2
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	2.2_sp3a
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	3.6
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.0_sp3
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	3.6_sp1a
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	2.2_sp4

Rows per page:

1-10 of 141

References

www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/8149/8052/Support_-_Corrupt_Word_file_may_cause_buffer_overflow_in_the_BlackBerry_Attachment_Service.html?nodeid=1181753&vernum=2

www.securityfocus.com/archive/1/424728/100/0/threaded

www.securityfocus.com/bid/16590

www.vupen.com/english/advisories/2006/0530

exchange.xforce.ibmcloud.com/vulnerabilities/24629