VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-2602
blackberry_enterprise_server: Multiple buffer overflows in the PDF distiller comp...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2602

Original

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF document.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-12-17
Source Information Category:
Advisory, Alert
Last Updated:
2010-12-20




Affected Product Tags
cpe:/a:rim:blackberry_enterprise_server:4.1.6
cpe:/a:rim:blackberry_enterprise_server:4.1.7
cpe:/a:rim:blackberry_enterprise_server:5.0.0
cpe:/a:rim:blackberry_enterprise_server:5.0.1
cpe:/a:rim:blackberry_enterprise_server:5.0.2
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
X Medium [?]
Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]
[Confidentiality Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]
[Integrity Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]
[Availability Impact]  [?]
Undefined [?]

None [?]
X Partial [?]
Complete [?]
Alternatives




References
BID 45392




CONFIRM http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24761




SECTRACK 1024891




SECUNIA 35632




VUPEN ADV-2010-3237




Vulnerability Type Buffer Errors (CWE-119)




XF bes-attachment-service-bo(64066)




Copyright © 2010 JPCERT/CC All Rights Reserved.