CVE-2010-2602

2010-12-1719:00:03

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-2602

pdf distiller

blackberry enterprise server

denial of service

remote code execution

nvd

8.1 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.04 Low

EPSS

Percentile

92.1%

JSON

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF document.

Affected configurations

NVD

Node

rimblackberry_enterprise_serverMatch4.1.6

rimblackberry_enterprise_serverMatch4.1.7

rimblackberry_enterprise_serverMatch5.0.0

rimblackberry_enterprise_serverMatch5.0.1

rimblackberry_enterprise_serverMatch5.0.2

CPENameOperatorVersion
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.6
rim:blackberry_enterprise_serverrim blackberry enterprise servereq4.1.7
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.0
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.1
rim:blackberry_enterprise_serverrim blackberry enterprise servereq5.0.2

CPE	Name	Operator	Version
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.6
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	4.1.7
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.0
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.1
rim:blackberry_enterprise_server	rim blackberry enterprise server	eq	5.0.2