CVE-2009-0219

Published: Jan 21, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.

Affected (9)

Products: Research In Motion Limited: Blackberry Enterprise Server, Blackberry Professional Software, Blackberry Unite

Research In Motion Limited

3 products

Blackberry Enterprise Server

Blackberry Professional Software

Blackberry Unite

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.3
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.4
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.5
Research In Motion Limited Blackberry Enterprise Server	Version 4.1.6
Research In Motion Limited Blackberry Professional Software	Version 4.1.4
Research In Motion Limited Blackberry Unite	Up to 1.0.3
Research In Motion Limited Blackberry Unite	Version 1.0.1
Research In Motion Limited Blackberry Unite	Version 1.0.2
Research In Motion Limited Blackberry Unite	Version 1.0