BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
BID:35102
Info
BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
| Bugtraq ID: | 35102 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2009 12:00AM |
| Updated: | May 26 2009 08:00PM |
| Credit: | Vendor |
| Vulnerable: |
Symantec Clientless VPN Gateway 4400 Series 4.0 SP3 Symantec Clientless VPN Gateway 4400 Series 4.0 SP2 Symantec Clientless VPN Gateway 4400 Series 4.0 SP1 Research In Motion Blackberry Professional Software 4.1.4 Research In Motion Blackberry Enterprise Server for Novell Groupwise 4.1 Research In Motion Blackberry Enterprise Server for Novell Groupwise 4.0 SP3 Hotfix 1 Research In Motion Blackberry Enterprise Server for Exchange 4.0 SP1 Research In Motion Blackberry Enterprise Server for Exchange 5.0 Research In Motion Blackberry Enterprise Server for Exchange 4.1 Research In Motion Blackberry Enterprise Server for Exchange 4.0 SP3 Hotfix 3 Research In Motion Blackberry Enterprise Server for Domino 4.0 Research In Motion Blackberry Enterprise Server for Domino 5.0 Research In Motion Blackberry Enterprise Server for Domino 4.1 SP3 Research In Motion Blackberry Enterprise Server for Domino 4.0 SP3 Hotfix 4 Research In Motion Blackberry Enterprise Server 4.1.6 MR5 Research In Motion Blackberry Enterprise Server 4.1.6 MR4 Research In Motion Blackberry Enterprise Server 4.1.6 Research In Motion Blackberry Enterprise Server 4.1.5 Research In Motion Blackberry Enterprise Server 4.1.4 Research In Motion Blackberry Enterprise Server 4.1.3 Research In Motion Blackberry Enterprise Server 5.0 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP3 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP2 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 SP1 Nortel Networks Contivity 4600 Secure IP Services Gateway 4.0 HP OpenCall MultiService Controller 4.0 SP3 HP OpenCall MultiService Controller 4.0 SP2 HP OpenCall MultiService Controller 4.0 |
| Not Vulnerable: | |
Discussion
BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
BlackBerry Attachment Service is prone to multiple remote code-execution vulnerabilities when handling specially crafted PDF files.
Attackers can leverage these issues to execute arbitrary machine code in the context of the vulnerable service, possibly with SYSTEM-level privileges. Successful exploits will compromise the server. Failed attacks will likely result in denial-of-service conditions.
BlackBerry Attachment Service is prone to multiple remote code-execution vulnerabilities when handling specially crafted PDF files.
Attackers can leverage these issues to execute arbitrary machine code in the context of the vulnerable service, possibly with SYSTEM-level privileges. Successful exploits will compromise the server. Failed attacks will likely result in denial-of-service conditions.
Exploit / POC
BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
Solution:
Vendor patches are available. Please see the referenced advisory for more information.
Solution:
Vendor patches are available. Please see the referenced advisory for more information.
References
BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
References:
References:
- Vendor Homepage (Research In Motion)
- Vulnerabilities in the PDF distiller of the BlackBerry Attachment Service for th (Research in Motion)