BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
BID:16590
Info
BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
| Bugtraq ID: | 16590 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2006 12:00AM |
| Updated: | Feb 13 2006 04:48PM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
Symantec Clientless VPN Gateway 4400 Series 4.0 SP3 Symantec Clientless VPN Gateway 4400 Series 4.0 SP2 Symantec Clientless VPN Gateway 4400 Series 4.0 SP1 Rim Blackberry Enterprise Server for Exchange 4.0 SP1 Rim Blackberry Enterprise Server for Exchange 3.6.1 Rim Blackberry Enterprise Server for Exchange 3.6 SP4 Hot Fix 2 Rim Blackberry Enterprise Server for Exchange 3.6 SP 1a Rim Blackberry Enterprise Server for Exchange 3.6 Rim Blackberry Enterprise Server for Domino 4.0 Rim Blackberry Enterprise Server for Domino 2.2 SP4 Hot Fix 2 Rim Blackberry Enterprise Server for Domino 2.2 SP4 Rim Blackberry Enterprise Server for Domino 2.2 SP3a Rim Blackberry Enterprise Server for Domino 2.2 SP2a Rim Blackberry Enterprise Server for Domino 2.2 SP2 Rim Blackberry Enterprise Server for Domino 2.2 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP3 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP2 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP1 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 HP OpenCall MultiService Controller 4.0 SP3 HP OpenCall MultiService Controller 4.0 SP2 HP OpenCall MultiService Controller 4.0 |
| Not Vulnerable: |
Rim Blackberry Enterprise Server for Novell Groupwise 4.0 SP3 Hotfix 1 Rim Blackberry Enterprise Server for Exchange 4.0 SP3 Hotfix 3 Rim Blackberry Enterprise Server for Exchange 3.6 SP7 Rim Blackberry Enterprise Server for Domino 4.0 SP3 Hotfix 4 |
Discussion
BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
BlackBerry Enterprise Server is prone to a buffer overflow in the BlackBerry Attachment Service. This issue can be triggered by a malformed Word document.
Successful exploitation may allow for the execution of arbitrary code in the context of the server.
BlackBerry Enterprise Server is prone to a buffer overflow in the BlackBerry Attachment Service. This issue can be triggered by a malformed Word document.
Successful exploitation may allow for the execution of arbitrary code in the context of the server.
Exploit / POC
BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
Solution:
The vendor has released updates to address this issue in some versions. Please see the vendor advisory for further details.
Solution:
The vendor has released updates to address this issue in some versions. Please see the vendor advisory for further details.
References
BlackBerry Enterprise Server Malformed Word Attachment Buffer Overflow Vulnerability
References:
References:
- Corrupt Word file may cause buffer overflow in the BlackBerry Attachment Service (Research in Motion)