CVE-2008-3246: Blackberry Enterprise Server

High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

Affected products

• Blackberry Enterprise Server: version 4.1 only; version 4.1.3 only; version 4.1.4 only; version 4.1.5 only
• Blackberry Unite: version 1.0 only; version 1.0.1 only
• Rim Blackberry Enterprise Server: version 4.1.3 only; version 4.1.4 only; version 4.1.5 only
• Rim Blackberry Enterprise Server For Domino: any version
• Rim Blackberry Enterprise Server For Exchange: any version
• Rim Blackberry Enterprise Server For Novell Groupwise: any version
• Rim Blackberry Unite: version 1.0 only; version 1.0.1 only

Published 2008-07-21. Last modified 2026-06-16.