What’s Vulnerable › Vulnerabilities

CVE-2008-3246

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-21 · updated 2026-06-16
• Weakness: CWE-94

Description

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

Affected products

• BlackBerry Enterprise Server: 4.1-sp3, 4.1.3, 4.1.4, 4.1.5
• BlackBerry Unite: 1.0-sp1, 1.0.1
• Rim Blackberry Enterprise Server: 4.1.3, 4.1.4, 4.1.5
• Rim Blackberry Enterprise Server For Domino: all versions
• Rim Blackberry Enterprise Server For Exchange: all versions
• Rim Blackberry Enterprise Server For Novell Groupwise: all versions
• Rim Blackberry Unite: 1.0-sp1, 1.0.1

References

• http://secunia.com/advisories/31092
• http://secunia.com/advisories/31141
• http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html
• http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html
• http://www.kb.cert.org/vuls/id/289235
• http://www.securitytracker.com/id?1020505
• http://www.vupen.com/english/advisories/2008/2108/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43840
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43843
• http://secunia.com/advisories/31092
• http://secunia.com/advisories/31141
• http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html

Get alerted when CVE-2008-3246 or the next vulnerability affects your stack