{"api_version":"1","generated_at":"2026-07-23T21:40:46+00:00","cve":"CVE-2010-2601","urls":{"html":"https://cve.report/CVE-2010-2601","api":"https://cve.report/api/cve/CVE-2010-2601.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2601","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2601"},"summary":{"title":"CVE-2010-2601","description":"Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-10-14 18:00:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.6","severity":"","vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://blackberry.com/btsc/KB24547","name":"http://blackberry.com/btsc/KB24547","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"KB24547-Vulnerability in the PDF distiller of the BlackBerry Attachment Service for the BlackBerry Enterprise Server","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2601","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2601","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"3.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.0","cpe7":"sp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"4.1.6","cpe7":"mr4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"5.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"5.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"5.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"4.1.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_enterprise_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2601","vulnerable":"1","versionEndIncluding":"4.1.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rim","cpe5":"blackberry_professional_software","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:39:37.880Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blackberry.com/btsc/KB24547"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-10-14T17:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://blackberry.com/btsc/KB24547"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2601","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://blackberry.com/btsc/KB24547","refsource":"CONFIRM","url":"http://blackberry.com/btsc/KB24547"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2601","datePublished":"2010-10-14T17:00:00.000Z","dateReserved":"2010-07-01T00:00:00.000Z","dateUpdated":"2024-09-16T22:30:05.763Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-10-14 18:00:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.7","matchCriteriaId":"72D28D57-8427-43D0-805C-C3D5040E9B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D89945C2-883A-4388-8EEB-52C774397A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"41EEFB40-C1E6-472A-BA67-94FDDCFC5A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A0A85E46-714C-40C6-9128-22D392FD7442"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0B7A2FFD-C840-459C-95C2-92FEDF341D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"8E297652-3533-4B2B-BA9E-FDC452BAE650"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B51FB6C5-1EA2-451E-A89B-9CE5EE3F8626"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C4ACEF3E-E394-45E2-B20F-8575C92A490F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B1694E42-9AA5-4503-9714-CBDE388481A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"265D8F90-96C3-4627-ABA5-994C25F70A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*","matchCriteriaId":"F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7EBA5181-F946-4F86-B5DB-07795ACF32D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"85752BAD-8110-41B4-BAEF-4C97BFDA046A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_enterprise_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"377D4536-5EAC-4F0A-94AD-4D326935A142"},{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry_professional_software:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"B46C310F-5BC8-4F7B-92A0-35098A3A6AE0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2601","Ordinal":"1","Title":"CVE-2010-2601","CVE":"CVE-2010-2601","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2601","Ordinal":"1","NoteData":"Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.","Type":"Description","Title":"CVE-2010-2601"},{"CveYear":"2010","CveId":"2601","Ordinal":"2","NoteData":"2010-10-14","Type":"Other","Title":"Published"}]}}}