Buffer overflow in Rim Blackberry Enterprise Server
CVE-2005-2344
The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.
Vulnerability class: Buffer Overflow
EPSS: 0.025 (82.7th percentile) — read the EPSS interpretation.
Affected products
- Rim Blackberry_enterprise_server — versions 4.0, 4.0_sp1, 4.0_sp2
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)