Code injection

2009-01-2101:30:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.068 Low

EPSS

Percentile

93.9%

JSON

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.

CPENameOperatorVersion
blackberry_enterprise_servereq4.1.3
blackberry_enterprise_servereq4.1.4
blackberry_enterprise_servereq4.1.6
blackberry_enterprise_servereq4.1.5
blackberry_professional_softwareeq4.1.4
blackberry_uniteeq1.0
blackberry_uniteeq1.0.2
blackberry_unitele1.0.3
blackberry_uniteeq1.0.1

Name	Operator	Version
blackberry_enterprise_server	eq	4.1.3
blackberry_enterprise_server	eq	4.1.4
blackberry_enterprise_server	eq	4.1.6
blackberry_enterprise_server	eq	4.1.5
blackberry_professional_software	eq	4.1.4
blackberry_unite	eq	1.0
blackberry_unite	eq	1.0.2
blackberry_unite	le	1.0.3
blackberry_unite	eq	1.0.1