BlackBerry Attachment Service PDF Distiller (CVE-2010-2604) Remote Buffer Overflow Vulnerability

Bugtraq ID:	45753
Class:	Boundary Condition Error
CVE:	CVE-2010-2604
Remote:	Yes
Local:	No
Published:	Jan 11 2011 12:00AM
Updated:	Jan 11 2011 12:00AM
Credit:	Research in Motion
Vulnerable:	Research In Motion Blackberry Professional Software 4.1.4 Research In Motion Blackberry Enterprise Server for Novell Groupwise 5.0.1 Research In Motion Blackberry Enterprise Server for Novell Groupwise 4.1.7 Research In Motion Blackberry Enterprise Server for Novell Groupwise 4.1.3 Research In Motion Blackberry Enterprise Server for Exchange 5.0.2 Research In Motion Blackberry Enterprise Server for Exchange 5.0.1 Research In Motion Blackberry Enterprise Server for Exchange 5.0 SP2 Research In Motion Blackberry Enterprise Server for Exchange 5.0 Research In Motion Blackberry Enterprise Server for Exchange 4.1.7 Research In Motion Blackberry Enterprise Server for Exchange 4.1.3 Research In Motion Blackberry Enterprise Server for Domino 5.0.2 Research In Motion Blackberry Enterprise Server for Domino 5.0.1 Research In Motion Blackberry Enterprise Server for Domino 5.0 Research In Motion Blackberry Enterprise Server for Domino 4.1.7 Research In Motion Blackberry Enterprise Server for Domino 4.1 SP3 Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.2 Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.1 Research In Motion Blackberry Enterprise Server Express for Domino 5.0.2 Research In Motion Blackberry Enterprise Server 4.1.7 MR1 Research In Motion Blackberry Enterprise Server 4.1.7 Research In Motion Blackberry Enterprise Server 4.1.6 MR5 Research In Motion Blackberry Enterprise Server 4.1.6 MR4 Research In Motion Blackberry Enterprise Server 4.1.6 Research In Motion Blackberry Enterprise Server 4.1.5 Research In Motion Blackberry Enterprise Server 4.1.4 Research In Motion Blackberry Enterprise Server 4.1.3 Research In Motion Blackberry Enterprise Server 5.0.2 Research In Motion Blackberry Enterprise Server 5.0 MR4 Research In Motion Blackberry Enterprise Server 5.0
Not Vulnerable:

BlackBerry Attachment Service PDF Distiller (CVE-2010-2604) Remote Buffer Overflow Vulnerability

BlackBerry Attachment Service is prone to a remote buffer-overflow vulnerability when handling specially crafted PDF files.

Attackers can leverage this issue to execute arbitrary machine code in the context of the vulnerable service, possibly with SYSTEM-level privileges. Successful exploits can compromise the server. Failed attacks will likely result in denial-of-service conditions.

The BlackBerry Attachment Service component is affected in the following applications:

BlackBerry Enterprise Server Express for Exchange 5.0.1 and 5.0.2
BlackBerry Enterprise Server Express 5.0.2 for Lotus Domino
BlackBerry Enterprise Server for Exchange 4.1.3 through 5.0.2
BlackBerry Enterprise Server for Lotus Domino 4.1.3 through 5.0.2
BlackBerry Enterprise Server for Novell Groupwise 4.1.3 through 5.0.1
BlackBerry Professional Software 4.1.4 and prior

BlackBerry Attachment Service PDF Distiller (CVE-2010-2604) Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

BlackBerry Attachment Service PDF Distiller (CVE-2010-2604) Remote Buffer Overflow Vulnerability

Solution:
Updates are available; please see the references for more information.

BlackBerry Attachment Service PDF Distiller (CVE-2010-2604) Remote Buffer Overflow Vulnerability

References:

• Vendor Homepage (BlackBerry)
  
• KB25382: Vulnerability in the PDF distiller of the BlackBerry Attachment Service (BlackBerry)