iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'symWidths' Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 01.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 12, 2009 I. BACKGROUND The BlackBerry Enterprise Server is a suite of applications used to connect enterprise email and messaging services to BlackBerry...

Microsoft Windows GDI 'CreateDIBPatternBrushPt' Function Heap Overflow Vulnerability

Description Microsoft Windows is prone to a heap-based overflow vulnerability that resides in the GDI graphics library and can be triggered by a malformed EMF or WMF image file. A successful exploit of this vulnerability can allow a remote attacker to completely compromise the affected computer...

Buffer overflow

Buffer overflow in the SetLanguage function in Research In Motion RIM TeamOn Import Object ActiveX control TOImport.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0323

Buffer overflow in the SetLanguage function in Research In Motion RIM TeamOn Import Object ActiveX control TOImport.dll allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0323

CVE-2007-0323 describes a buffer overflow in the SetLanguage function of the Research In Motion TeamOn Import Object ActiveX control (TOImport.dll). The vulnerability could allow an attacker to execute arbitrary code on a vulnerable system, potentially via a user-loaded HTML/IE context that lever...

CVE-2007-1441

The 4thPass browser BlackBerry Browser on the RIM BlackBerry 8100 Pearl before 4.2.1 allows remote attackers to cause a denial of service temporary functionality loss via a long href attribute in a link in a WML page...

CVE-2007-1441

The 4thPass browser BlackBerry Browser on the RIM BlackBerry 8100 Pearl before 4.2.1 allows remote attackers to cause a denial of service temporary functionality loss via a long href attribute in a link in a WML page...

CVE-2006-5489

Research in Motion RIM BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service application hang via a deleted recurrent meeting instance when changing the attendee's calendar meeting time...

CVE-2006-5489

The CVE-2006-5489 entry affects Research in Motion BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino . The issue allows attackers with meeting organizer privileges to trigger a denial of service (application hang) by manipulating a deleted recurrent meeting instance when c...

Buffer overflow

Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...

CVE-2006-0761

Summary (CVE-2006-0761): A buffer overflow in the BlackBerry Attachment Service of BlackBerry Enterprise Server (RIM) may allow a remote attacker to execute arbitrary code when a user opens a crafted Microsoft Word document on a BlackBerry device. Affected products/versions include BlackBerry Ser...

CVE-2006-0761

Buffer overflow in BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow...

CVE-2005-2344

The vulnerability CVE-2005-2344 affects Research in Motion’s BlackBerry Attachment Service (BES) for BES installations on Windows, where a malformed PNG file can trigger a heap-based buffer overflow. This can cause the Attachment Service to stop responding or crash, and may allow arbitrary code e...

CVE-2005-2342

The CVE-2005-2342 issue affects the Research In Motion (RIM) BlackBerry Router within BlackBerry Enterprise Server (BES). A remote, unauthenticated attacker can cause a denial-of-service (communication disruption) by sending crafted Server Routing Protocol (SRP) packets to the router, potentially...

CVE-2005-2341

CVE-2005-2341 describes a heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service that can be triggered by viewing a crafted TIFF attachment in an e‑mail, enabling a remote attacker to cause a denial of service (hang). Affected component: BlackBerry Attachment Service...

CVE-2005-2343

The CVE-2005-2343 issue affects the Research in Motion (RIM) BlackBerry Handheld web browser prior to 4.0.2. A denial of service can be triggered remotely by a specially crafted Java Application Description (JAD) file with an extremely long application name and vendor string, causing the browser ...

Research in Motion (RIM) BlackBerry Attachment Service does not properly handle TIFF image files

Overview The Research in Motion RIM BlackBerry Attachment Service contains a vulnerability in the way the service handles TIFF files. By causing the service to render a specially crafted TIFF file and convincing a user to view the file on a BlackBerry Handheld device, an attacker could cause a...

CVE-2004-1597

The CVE-2004-1597 entry documents a denial-of-service condition affecting RIM BlackBerry 7230 devices running BlackBerry OS 3.7 SP1. The vulnerability arises when processing a calendar message with an excessively long Location field, which triggers a watchdog during message storage and can lead t...

CVE-2004-1597

RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...

CVE-2004-1597

RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service device reboot and possibly data corruption via a calendar message with a long Location field, which triggers a watchdog while the message is being stored...