CVE-2005-2344: Buffer Overflow

Published Dec 31, 2005

Updated

The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.

Affected Software

3 affected components

RIM BlackBerry Enterprise Server=4.0_sp2

RIM BlackBerry Enterprise Server=4.0_sp1

RIM BlackBerry Enterprise Server=4.0

Remediation

Patch Available

http://secunia.com/advisories/18393

Event History

Dec 31, 2005

CVE Published

05:00 AM

Jan 10, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2344?

CVE-2005-2344 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2005-2344?

To mitigate CVE-2005-2344, it's recommended to upgrade the BlackBerry Enterprise Server to a patched version beyond 4.0 Service Pack 2.

What systems are affected by CVE-2005-2344?

CVE-2005-2344 affects BlackBerry Enterprise Server versions 4.0, 4.0 Service Pack 1, and 4.0 Service Pack 2.

What type of vulnerability is CVE-2005-2344?

CVE-2005-2344 is a heap-based buffer overflow vulnerability triggered by malformed PNG files.

Can CVE-2005-2344 be exploited remotely?

Yes, CVE-2005-2344 can be exploited remotely to disrupt the BlackBerry Attachment Service.