Vulnerability CVE-2008-3246 - CERT Civis.Net

Vulnerability Name:

CVE-2008-3246 (CCN-43840)

Assigned:

2008-07-10

Published:

2008-07-10

Updated:

2017-08-08

Summary:

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.5 High (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:W/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.5 High (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:W/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-noinfo
CWE-94

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2008-3246

Source: CCN
Type: SA31092
BlackBerry Enterprise Server PDF Processing Vulnerability

Source: SECUNIA
Type: Vendor Advisory
31092

Source: CCN
Type: SA31141
BlackBerry Unite! PDF Processing Vulnerability

Source: SECUNIA
Type: UNKNOWN
31141

Source: CCN
Type: SECTRACK ID: 1020505
BlackBerry Enterprise Server Bug in PDF Distiller Lets Remote Users Execute Arbitrary Code

Source: CONFIRM
Type: UNKNOWN
http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html

Source: CONFIRM
Type: UNKNOWN
http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html

Source: CCN
Type: BlackBerry Security Advisory KB15766
Vulnerability in the PDF distiller of the BlackBerry Attachment Service for the BlackBerry Enterprise Server

Source: CCN
Type: BlackBerry Security Advisory KB15770
Vulnerability in the PDF distiller of the BlackBerry Attachment Service for BlackBerry Unite

Source: CCN
Type: US-CERT VU#289235
BlackBerry Attachment Service PDF distiller vulnerable to arbitrary code execution

Source: CERT-VN
Type: US Government Resource
VU#289235

Source: CCN
Type: OSVDB ID: 47296
BlackBerry Multiple Products PDF Distiller Component PDF Processing Arbitrary Code Execution

Source: CCN
Type: OSVDB ID: 60652
BlackBerry Multiple Products PDF Distiller PDF File Handling Arbitrary Code Execution

Source: SECTRACK
Type: UNKNOWN
1020505

Source: VUPEN
Type: UNKNOWN
ADV-2008-2108

Source: XF
Type: UNKNOWN
blackberry-es-pdf-code-execution(43840)

Source: XF
Type: UNKNOWN
blackberry-es-pdf-code-execution(43840)

Source: XF
Type: UNKNOWN
blackberry-unite-pdf-code-execution(43843)

Vulnerable Configuration:

Configuration 1:

cpe:/a:blackberry:enterprise_server:4.1:sp3:*:*:*:*:*:*

OR cpe:/a:blackberry:enterprise_server:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:blackberry:enterprise_server:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:blackberry:enterprise_server:4.1.5:*:*:*:*:*:*:*

OR cpe:/a:blackberry:unite:1.0:sp1:*:*:*:*:*:*

OR cpe:/a:blackberry:unite:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server_for_domino:*:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server_for_exchange:*:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server_for_novell_groupwise:*:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_unite:1.0:sp1:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_unite:1.0.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*

Denotes that component is vulnerable