CVE-2009-0176
research in motion limited: no CVSS score yet. EPSS 5.5% chance of exploitation in the next 30 days.
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."
- EPSS
- 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- research_in_motion_limited:blackberry_enterprise_server
- research_in_motion_limited:blackberry_professional_software
- research_in_motion_limited:blackberry_unite
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=764
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=765
- http://secunia.com/advisories/33534
- http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17118
- http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB17119