Description
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.
Affected products
- BlackBerry / enterprise_server4.1 – 4.1
- BlackBerry / enterprise_server4.1.3 – 4.1.3
- BlackBerry / enterprise_server4.1.4 – 4.1.4
- BlackBerry / enterprise_server4.1.5 – 4.1.5
- BlackBerry / unite1.0 – 1.0
- BlackBerry / unite1.0.1 – 1.0.1
- rim / blackberry_enterprise_server4.1.3 – 4.1.3
- rim / blackberry_enterprise_server4.1.4 – 4.1.4
- rim / blackberry_enterprise_server4.1.5 – 4.1.5
- rim / blackberry_enterprise_server_for_domino
- rim / blackberry_enterprise_server_for_exchange
- rim / blackberry_enterprise_server_for_novell_groupwise
- rim / blackberry_unite1.0 – 1.0
- rim / blackberry_unite1.0.1 – 1.0.1
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/31141
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/43843
- MISChttp://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/43840
- MISChttp://www.kb.cert.org/vuls/id/289235
- MISChttp://www.securitytracker.com/id?1020505
- VENDOR_ADVISORYhttp://secunia.com/advisories/31092
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2108/references
- MISChttp://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html