CVE-2009-2643

no score yetEPSS 5.0%

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2009-07-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rim:blackberry_enterprise_server
rim:blackberry_professional_software

References

http://secunia.com/advisories/35254
http://www.blackberry.com/btsc/KB18327
http://www.osvdb.org/54767
http://www.securityfocus.com/bid/35102
http://www.securitytracker.com/id?1022295

Check your stack JSON