NVD

Id
47513  
Name
CVE-2009-0176  
Description
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-20  
Modified Date
2009-05-18  
Seq
2009-0176  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237988 47513 CVE-2009-0176 20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller "symWidths" Heap Overflow Vulnerability  View
237989 47513 CVE-2009-0176 20090113 RIM BlackBerry Enterprise Server Attachment Service PDF Distiller "bitmaps" Heap Overflow Vulnerability  View
237990 47513 CVE-2009-0176 http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118  View
237991 47513 CVE-2009-0176 http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119  View
237992 47513 CVE-2009-0176 33224  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41686 JVNDB-2009-002693 複数の RIM BlackBerry 製品におけるヒープベースのバッファオーバーフローの脆弱性 Research in Motion (RIM) BlackBerry Enterprise Server (BES)、BlackBerry Professional Software、および BlackBerry Unite! の Attachment Service 内の PDF Distiller には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0176 37607 CVE-2009-0176 47513 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002693.html 2009-01-12 2011-12-22 View