NetSight
IP …
critical9.3

CVE-2009-0219

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Softwar…

Impact

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.

Affected products

VendorProductAffected versions
Research In Motion LimitedBlackberry Enterprise Server
Versions 4.1.3, 4.1.4, 4.1.5, 4.1.6
Research In Motion LimitedBlackberry Professional Software
Version 4.1.4
Research In Motion LimitedBlackberry Unite
through 1.0.3
Versions 1.0, 1.0.1, 1.0.2

Weakness classification

CWE-399

References