Unscored severity · published Jan 12, 2011
CVE-2010-2604
Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Blackberry Enterprise Server · Rim
4.1.3; 4.1.4; 4.1.5; 4.1.6; 4.1.6; 4.1.7; +3 more · source: NVD
BE
Blackberry Enterprise Server Express · Rim
5.0.1; 5.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2604
osvdb.org
http://osvdb.org/70393
Vendor Advisory
http://secunia.com/advisories/42882
Vendor Advisory
http://www.blackberry.com/btsc/KB25382
www.securityfocus.com
http://www.securityfocus.com/bid/45753
www.securitytracker.com
http://www.securitytracker.com/id?1024953
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0081
More from Blackberry Enterprise Server
–
CVE-2011-0290
The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote…
–
CVE-2011-0287
Unspecified vulnerability in the BlackBerry Administration API in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 5.0.1 through 5.0.3, and BlackBerry…
–
CVE-2011-0286
Cross-site scripting (XSS) vulnerability in webdesktop/app in the BlackBerry Web Desktop Manager component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software…
–
CVE-2010-2602
Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote…
–
CVE-2010-2601
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and…