VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 30, 2009· Updated Jun 16, 2026

CVE-2009-2646

CVE-2009-2646

Description

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment, a different vulnerability than CVE-2008-3246 and CVE-2009-0219.

Affected products

12
  • Rim/Blackberry Enterprise Server9 versions
    cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp2:domino:*:*:*:*:*
    • cpe:2.3:a:rim:blackberry_enterprise_server:4.1:sp3:*:*:*:*:*:*
  • Rim/Blackberry Professional Software
    cpe:2.3:a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*
  • Research in Motion (RIM)/BlackBerry Enterprise Serverllm-fuzzy
    Range: 4.1.3 - 4.1.6
  • Research in Motion (RIM)/BlackBerry Professional Softwarellm-fuzzy
    Range: 4.1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.