CVE-2008-3246: Code Injection

Published Jul 21, 2008

Updated

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

Affected Software

14 affected components

BlackBerry Enterprise Server=4.1-sp3

BlackBerry Enterprise Server=4.1.3

BlackBerry Enterprise Server=4.1.4

BlackBerry Enterprise Server=4.1.5

BlackBerry Unite=1.0-sp1

BlackBerry Unite=1.0.1

RIM BlackBerry Enterprise Server=4.1.3

RIM BlackBerry Enterprise Server=4.1.4

RIM BlackBerry Enterprise Server=4.1.5

RIM Blackberry Enterprise Server For Domino

RIM Blackberry Enterprise Server For Exchange

RIM Blackberry Enterprise Server For Novell Groupwise

RIM Blackberry Unite=1.0-sp1

RIM Blackberry Unite=1.0.1

Event History

Jul 21, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3246?

CVE-2008-3246 is classified as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2008-3246?

To fix CVE-2008-3246, upgrade to the latest version of BlackBerry Unite or BlackBerry Enterprise Server that includes patches for this vulnerability.

Which software versions are affected by CVE-2008-3246?

CVE-2008-3246 affects BlackBerry Unite! 1.0 SP1 and BlackBerry Enterprise Server versions 4.1 SP3 to 4.1 SP5.

What type of attacks does CVE-2008-3246 enable?

CVE-2008-3246 enables user-assisted remote attackers to execute arbitrary code on affected systems.

Can CVE-2008-3246 be exploited without user interaction?

CVE-2008-3246 requires user interaction to exploit, making it a user-assisted attack vector.