← Back

CVE-2008-3246

nvd nist
Published: Jul 21, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

Affected (14)

Blackberry
2 products
Enterprise Server
Unite
Rim
5 products
Blackberry Enterprise Server
Blackberry Enterprise Server For Domino
Blackberry Enterprise Server For Exchange
Blackberry Enterprise Server For Novell Groupwise
Blackberry Unite
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Blackberry
Enterprise Server
Version 4.1.3
Enterprise Server
Version 4.1.4
Enterprise Server
Version 4.1.5
Enterprise Server
Version 4.1 sp3
Blackberry
Unite
Version 1.0.1
Unite
Version 1.0 sp1
Rim
Blackberry Enterprise Server
Version 4.1.3
Blackberry Enterprise Server
Version 4.1.4
Blackberry Enterprise Server
Version 4.1.5
Blackberry Enterprise Server For Domino
All versions
Blackberry Enterprise Server For Exchange
All versions
Blackberry Enterprise Server For Novell Groupwise
All versions
Rim
Blackberry Unite
Version 1.0.1
Blackberry Unite
Version 1.0 sp1

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (18)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.