Vulnerability CVE-2010-2601 - CERT Civis.Net

Vulnerability Name:

CVE-2010-2601 (CCN-62524)

Assigned:

2010-10-13

Published:

2010-10-13

Updated:

2010-10-15

Summary:

Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.6 High (CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CONFIRM
Type: Patch, Vendor Advisory
http://blackberry.com/btsc/KB24547

Source: MITRE
Type: CNA
CVE-2010-2601

Source: CCN
Type: SA41842
BlackBerry Enterprise Server PDF Distiller Unspecified Vulnerability

Source: CCN
Type: SA41844
BlackBerry Professional Software PDF Distiller Unspecified Vulnerability

Source: CCN
Type: Blackberry KB24547
Vulnerability in the PDF distiller of the BlackBerry Attachment Service for the BlackBerry Enterprise Server

Source: CCN
Type: OSVDB ID: 68636
BlackBerry Enterprise Server PDF Distiller Unspecified Overflow

Source: CCN
Type: BID-44056
BlackBerry Attachment Service PDF Distiller Remote Buffer Overflow Vulnerability

Source: XF
Type: UNKNOWN
bes-attachment-bo(62524)

Vulnerable Configuration:

Configuration 1:

cpe:/a:rim:blackberry_enterprise_server:2.2:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:3.6:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:3.6.1:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.0:sp3:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.5:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.6:mr4:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:*:*:*:*:*:*:*:* (Version <= 4.1.7)

OR cpe:/a:rim:blackberry_enterprise_server:5.0.0:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:5.0.2:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_professional_software:*:*:*:*:*:*:*:* (Version <= 4.1.4)

Configuration CCN 1:

cpe:/a:rim:blackberry_enterprise_server:4.1.6:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_professional_software:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:5.0:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:4.1.7:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:rim:blackberry_enterprise_server:5.0.2:*:*:*:*:*:*:*

Denotes that component is vulnerable