CVE-2008-3246 Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) thr...
HighCVSS 9.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry enterprise server | = 4.1-sp3 | No fix listed |
| blackberry enterprise server | = 4.1.3 | No fix listed |
| blackberry enterprise server | = 4.1.4 | No fix listed |
| blackberry enterprise server | = 4.1.5 | No fix listed |
| blackberry unite | = 1.0-sp1 | No fix listed |
| blackberry unite | = 1.0.1 | No fix listed |
| rim blackberry enterprise server | = 4.1.3 | No fix listed |
| rim blackberry enterprise server | = 4.1.4 | No fix listed |
| rim blackberry enterprise server | = 4.1.5 | No fix listed |
| rim blackberry enterprise server for domino | All versions | No fix listed |
| rim blackberry enterprise server for exchange | All versions | No fix listed |
| rim blackberry enterprise server for novell groupwise | All versions | No fix listed |
| rim blackberry unite | = 1.0-sp1 | No fix listed |
| rim blackberry unite | = 1.0.1 | No fix listed |
References
- 31092 third-party-advisory vendor-advisory
- 31141 third-party-advisory
- www.blackberry.com
- www.blackberry.com
- VU#289235 third-party-advisory us-government-resource
- 1020505 vdb-entry
- ADV-2008-2108 vdb-entry
- blackberry-es-pdf-code-execution(43840) vdb-entry
- blackberry-unite-pdf-code-execution(43843) vdb-entry