Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0176

EPSS 6.48% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0176

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Research_In_Motion_Limited BlackBerry Unite!附件服务组件PDF Distiller远程代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BlackBerry Unite!是用于通过PC远程管理黑莓手机的软件。 BlackBerry Unite!和其他一些黑莓手机应用软件所使用的BlackBerry附件服务组件中的PDF distiller没有正确地处理特制的PDF文件。如果用户发送了包含有恶意PDF文件的邮件消息的话，则使用黑莓手机打开或查看该邮件就可以触发内存破坏，导致在运行BlackBerry附件服务的主机上执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0176

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0176

Please Login to view more intelligence information

Same Patch Batch · n/a · 2009-01-20 · 19 CVEs total

CVE-2008-5915Google Chrome 安全漏洞
CVE-2009-0177VMWare Workstation hcmon.sys驱动本地拒绝服务漏洞
CVE-2009-0175Heathcosoft MP3 TrackMaker '.mp3'文件远程堆缓冲区溢出漏洞
CVE-2009-0174VUPlayer .asx播放列表文件处理缓冲区溢出漏洞
CVE-2008-5911RealNetworks Helix Server和Helix Mobile Server 多个缓冲区溢出漏洞
CVE-2009-0181VUPlayer 缓冲区溢出漏洞
CVE-2009-0180Nfs nfs-utils特定Fedora build脚本安全绕过漏洞
CVE-2009-0179Igno_Saitz libmikmod '.XM'文件远程拒绝服务漏洞
CVE-2009-0178IBM Hardware Management Console (HMC) 未明漏洞
CVE-2009-0182VUPlayer 缓冲区错误漏洞
CVE-2008-5914Apple Safari JavaScript执行工具未明函数创建和文件覆盖漏洞
CVE-2008-5913Mozilla Firefox和SeaMonkey JavaScript实现欺骗漏洞
CVE-2008-5912Microsoft Internet Explorer执行工具未明函数创建和文件覆盖漏洞
CVE-2008-5516Git 操作系统命令注入漏洞
CVE-2008-4388Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞
CVE-2008-2368Red Hat Certificate System 多个日志文件本地信息泄露漏洞
CVE-2008-2367Red Hat Certificate System 多个配置文件本地信息泄露漏洞
CVE-2007-6720Igno_Saitz libmikmod Multiple Sound Channel Media Playback远程拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0176

No comments yet

Leave a comment