BlackBerry Attachment Service PDF Distiller Remote Buffer Overflow Vulnerability

BlackBerry Attachment Service PDF Distiller Remote Buffer Overflow Vulnerability

BlackBerry Attachment Service is prone to a remote heap-based buffer-overflow vulnerability when handling specially crafted PDF files.

Attackers can leverage this issue to execute arbitrary machine code in the context of the vulnerable service, possibly with SYSTEM-level privileges. Successful exploits will compromise the server. Failed attacks will likely result in denial-of-service conditions.

This issue affects the following:

BlackBerry Enterprise Server 4.1.3 through 4.1.6
BlackBerry Unite! prior to 1.0 SP3 bundle 28
BlackBerry Professional Software 4.1.4