CVE-2009-0219 - CVE House
Back to Database
Status published Critical CVE-2009-0219

The PDF distiller in the Attachment Service in Research in...

Vulnerability Description

The PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted data stream in a .pdf file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0219

Credits & Attribution

No credits recorded in the NVD database.

References

More from research in motion limited

View All →
CVE-2009-0305
Multiple stack-based buffer overflows in the Research in Motion RIM...
Critical 9.3
CVE-2009-0176
Multiple heap-based buffer overflows in the PDF distiller in the...
Critical 9.3
CVE-2007-3443
The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle...
Low 2.3
CVE-2007-3442
Format string vulnerability on the Research in Motion BlackBerry 7270...
Low 2.3

Affected Vendor

research in motion limited

View all reports →

Affected Software

blackberry enterprise server, blackberry professional software, blackberry unite
Vulnerable Versions:
4.1.3, 4.1.4, 4.1.5, 4.1.6, 0, 1.0, 1.0.1, 1.0.2

Timeline

Official Publish: January 21st, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.