CVE-2009-2646
First published: Thu Jul 30 2009(Updated: )
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BlackBerry Enterprise Server | =4.1 | |
| BlackBerry Enterprise Server | =4.1-sp2 | |
| BlackBerry Enterprise Server | =4.1-sp2 | |
| BlackBerry Enterprise Server | =4.1-sp3 | |
| BlackBerry Enterprise Server | =4.1.3 | |
| BlackBerry Enterprise Server | =4.1.4 | |
| BlackBerry Enterprise Server | =4.1.5 | |
| BlackBerry Enterprise Server | =4.1.6 | |
| BlackBerry Enterprise Server | =4.1.6-mr4 | |
| Blackberry Professional Software | =4.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-2646?
CVE-2009-2646 is categorized as a denial of service vulnerability impacting specific BlackBerry Enterprise Server and BlackBerry Professional Software versions.
How do I fix CVE-2009-2646?
To fix CVE-2009-2646, users should upgrade to the latest version of BlackBerry Enterprise Server or BlackBerry Professional Software where the vulnerabilities are addressed.
What versions are affected by CVE-2009-2646?
The affected versions include BlackBerry Enterprise Server 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4.
Can CVE-2009-2646 be exploited remotely?
Yes, CVE-2009-2646 can be exploited by remote attackers, but it requires user assistance.
What does CVE-2009-2646 allow attackers to do?
CVE-2009-2646 allows user-assisted remote attackers to cause a denial of service condition.
- agent/type
- agent/references
- agent/author
- agent/remedy
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/rim
- canonical/blackberry enterprise server
- version/blackberry enterprise server/4.1
- version/blackberry enterprise server/4.1-sp2
- version/blackberry enterprise server/4.1-sp3
- version/blackberry enterprise server/4.1.3
- version/blackberry enterprise server/4.1.4
- version/blackberry enterprise server/4.1.5
- version/blackberry enterprise server/4.1.6
- version/blackberry enterprise server/4.1.6-mr4
- canonical/blackberry professional software
- version/blackberry professional software/4.1.4