CVE-2009-0176

Published: Jan 20, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."

Affected (9)

Products: Research In Motion Limited: Blackberry Enterprise Server, Blackberry Professional Software, Blackberry Unite

Research In Motion Limited

3 products

Blackberry Enterprise Server

Blackberry Professional Software

Blackberry Unite

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.3
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.4
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.5
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.6
Research In Motion Limited Blackberry Professional Software	Version 4.1.4
Research In Motion Limited Blackberry Unite	Up to 1.0.3
Research In Motion Limited Blackberry Unite	Version 1.0.1
Research In Motion Limited Blackberry Unite	Version 1.0.2
Research In Motion Limited Blackberry Unite	Version 1.0