CVE-2010-2601

Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.

CVSS v2.0 7.6 HIGH

7.6^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blackberry.com/btsc/KB24547	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rim:blackberry_enterprise_server::::::::
	cpe:2.3:a:rim:blackberry_enterprise_server:2.2:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:3.6:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:3.6.1:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.0:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.0:sp3::::::
	cpe:2.3:a:rim:blackberry_enterprise_server:4.0.3:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4::::::
	cpe:2.3:a:rim:blackberry_enterprise_server:5.0.0:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:5.0.1:::::::*
	cpe:2.3:a:rim:blackberry_enterprise_server:5.0.2:::::::*
	cpe:2.3:a:rim:blackberry_professional_software::::::::

History

No history.

Information

Published : 2010-10-14 18:00

Updated : 2024-02-04 17:54

NVD link : CVE-2010-2601

Mitre link : CVE-2010-2601

CVE.ORG link : CVE-2010-2601

JSON object : View

Products Affected

rim

blackberry_professional_software
blackberry_enterprise_server

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2010-2601", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-10-14T18:00:03.837", "references": [{"url": "http://blackberry.com/btsc/KB24547", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en PDF distiller en el componente Attachment Service en Research In Motion (RIM) BlackBerry Enterprise Server (BES) software v4.1.7 and earlier y v5.0.0 hasta v5.0.2, y BlackBerry Professional Software v4.1.4 and earlier, permite a atacantse asistidos por usuarios remotos causar una denegacion de servicio y probablemente ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un documento PDF manipulado. \r\n\r\n\r\n"}], "lastModified": "2010-10-15T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72D28D57-8427-43D0-805C-C3D5040E9B57", "versionEndIncluding": "4.1.7"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D89945C2-883A-4388-8EEB-52C774397A8F"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41EEFB40-C1E6-472A-BA67-94FDDCFC5A16"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0A85E46-714C-40C6-9128-22D392FD7442"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B7A2FFD-C840-459C-95C2-92FEDF341D5E"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E297652-3533-4B2B-BA9E-FDC452BAE650"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B51FB6C5-1EA2-451E-A89B-9CE5EE3F8626"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4ACEF3E-E394-45E2-B20F-8575C92A490F"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4BD344A-EE9C-4ECB-8CB1-35146FD6F056"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1694E42-9AA5-4503-9714-CBDE388481A5"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16F378AF-E25B-4D60-AF7E-9E6FB228BF1B"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "265D8F90-96C3-4627-ABA5-994C25F70A45"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5A7A6BD-C0D7-40E0-BE1A-EC4396853296"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EBA5181-F946-4F86-B5DB-07795ACF32D9"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85752BAD-8110-41B4-BAEF-4C97BFDA046A"}, {"criteria": "cpe:2.3:a:rim:blackberry_enterprise_server:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "377D4536-5EAC-4F0A-94AD-4D326935A142"}, {"criteria": "cpe:2.3:a:rim:blackberry_professional_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B46C310F-5BC8-4F7B-92A0-35098A3A6AE0", "versionEndIncluding": "4.1.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}