Description
The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.
References
- 18393 third-party-advisory
- blackberry-attachment-png-bo(24063) vdb-entry
- 16204 vdb-entry
- ADV-2006-0127 vdb-entry
- http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794
- VU#646976 third-party-advisory