Unscored severity · published Jul 21, 2008
CVE-2008-3246
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Blackberry Enterprise Server · Rim
4.1.3; 4.1.4; 4.1.5 · source: NVD
BE
Blackberry Enterprise Server For Domino · Rim
All versions, or not specified · source: NVD
BE
Blackberry Enterprise Server For Exchange · Rim
All versions, or not specified · source: NVD
BE
Blackberry Enterprise Server For Novell Groupwise · Rim
All versions, or not specified · source: NVD
BU
Blackberry Unite · Rim
1.0; 1.0.1 · source: NVD
ES
Enterprise Server · Blackberry
4.1; 4.1.3; 4.1.4; 4.1.5 · source: NVD
UN
Unite · Blackberry
1.0; 1.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3246
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3246
Vendor Advisory
http://secunia.com/advisories/31092
secunia.com
http://secunia.com/advisories/31141
www.blackberry.com
http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html
www.blackberry.com
http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html
US Government Resource
http://www.kb.cert.org/vuls/id/289235
www.securitytracker.com
http://www.securitytracker.com/id?1020505
More from Enterprise Server
6.1
CVE-2016-3126
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or…
6.1
CVE-2016-1918
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or…
6.1
CVE-2016-1917
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or…
5.4
CVE-2016-1916
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web…
–
CVE-2015-4112
The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct…