CVE-2009-4778

Опубликовано: 21 апр. 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246, CVE-2009-0176, CVE-2009-0219, CVE-2009-2643, and CVE-2009-2646.

Ссылки

http://secunia.com/advisories/37562
Vendor Advisory
http://www.blackberry.com/btsc/KB19860
Patch
Vendor Advisory
http://www.securityfocus.com/bid/37167
http://www.securitytracker.com/id?1023258
http://www.vupen.com/english/advisories/2009/3372
Patch
Vendor Advisory
http://secunia.com/advisories/37562
Vendor Advisory
http://www.blackberry.com/btsc/KB19860
Patch
Vendor Advisory
http://www.securityfocus.com/bid/37167
http://www.securitytracker.com/id?1023258
http://www.vupen.com/english/advisories/2009/3372
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:4.1.7:*:*:*:*:*:*:*

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02373

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-m244-vv23-hg2f

github

почти 4 года назад