CVE-2009-0176
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 5.5%
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."
Productos afectados
n/a · n/aReferencias
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765http://secunia.com/advisories/33534http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119http://www.securityfocus.com/bid/33224