What is CVE-2010-2601?

CVE-2010-2601 is a vulnerability in Rim Blackberry Enterprise Server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2010-10-14.

Is CVE-2010-2601 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Rim Blackberry Enterprise Server

CVE-2010-2601

Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.

Vulnerability class: Buffer Overflow

EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.

Affected products

Rim Blackberry_enterprise_server — versions 4.0, 4.1.4, 5.0.2
Rim Blackberry_professional_software
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2010-2601?: CVE-2010-2601 is a vulnerability in Rim Blackberry Enterprise Server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2010-10-14.
Is CVE-2010-2601 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.