{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "BlackBerry Professional Software sans la mise \u00e0 jour Interim Security Update 4.",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BlackBerry Enterprise Server version 5.0 sans la mise \u00e0 jour Interim Security Update 2 ;",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    },
    {
      "description": "BlackBerry Enterprise Server version 4.1.x sans la mise \u00e0 jour Interim Security Update 4 ;",
      "product": {
        "name": "Security",
        "vendor": {
          "name": "ESET",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDes vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans la manipulation de fichiers\nau format PDF par le service en charge du traitement des pi\u00e8ces jointes\nc\u00f4t\u00e9 serveur BlackBerry Attachment Service. Elles peuvent \u00eatre\nexploit\u00e9es \u00e0 distance afin d\u0027ex\u00e9cuter du code arbitraire sur le syst\u00e8me\nh\u00e9bergeant ce service.\n\nLes vuln\u00e9rabilit\u00e9s sont distinctes de celles ayant fait l\u0027objet de\nl\u0027avis CERTA-2009-AVI-011 du 12 janvier 2009.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2009-05-27T00:00:00",
  "last_revision_date": "2009-05-27T00:00:00",
  "links": [
    {
      "title": "Site de t\u00e9l\u00e9chargement RIM BlackBerry\u00a0:",
      "url": "http://www.blackberry.com/go/serverdownloads"
    }
  ],
  "reference": "CERTA-2009-AVI-201",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-05-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans la manipulation de fichiers\nau format PDF par \u003cspan class=\"textit\"\u003eBlackBerry Attachment\nService\u003c/span\u003e. Elles peuvent \u00eatre exploit\u00e9es \u00e0 distance afin d\u0027ex\u00e9cuter\ndu code arbitraire sur le syst\u00e8me h\u00e9bergeant ce service.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans des services BlackBerry",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RIM KB18327 du 26 mai 2009",
      "url": "http://blackberry.com/btsc/KB18327"
    }
  ]
}