VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 30, 2009· Updated Apr 23, 2026

CVE-2009-2646

CVE-2009-2646

Description

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.

Affected products

10
  • Rim/Blackberry Enterprise Server9 versions
    cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:domino:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*
  • Rim/Blackberry Professional Software
    cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.