CVE

Id
37654  
CVE No.
CVE-2009-0219  
Status
Candidate  
Description
The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.  
Phase
Assigned (20090120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
409054 37654 CVE-2009-0219 IDEFENSE:20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller Uninitialized Memory Vulnerability  View
409055 37654 CVE-2009-0219 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=766  View
409056 37654 CVE-2009-0219 CONFIRM:http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118  View
409057 37654 CVE-2009-0219 CONFIRM:http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119  View
409058 37654 CVE-2009-0219 BID:33250  View
409059 37654 CVE-2009-0219 URL:http://www.securityfocus.com/bid/33250  View
409060 37654 CVE-2009-0219 SECTRACK:1021559  View
409061 37654 CVE-2009-0219 URL:http://www.securitytracker.com/id?1021559  View
409062 37654 CVE-2009-0219 SECUNIA:33534  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40294 JVNDB-2009-001300 Microsoft Office PowerPoint におけるサウンドデータの処理に関する任意のコードを実行される脆弱性 Microsoft Office PowerPoint には、サウンドデータの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0223 37654 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001300.html  View