CVE-2008-3246

Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 SP1 (1.0.1) before bundle 36 and BlackBerry Enterprise Server 4.1 SP3 (4.1.3) through 4.1 SP5 (4.1.5) allows user-assisted remote attackers to execute arbitrary code via a crafted PDF file attachment.

• CWE-94

• http://secunia.com/advisories/31092Vendor Advisory
• http://secunia.com/advisories/31141
• http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html
• http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html
• http://www.kb.cert.org/vuls/id/289235US Government Resource
• http://www.securitytracker.com/id?1020505
• http://www.vupen.com/english/advisories/2008/2108/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43840
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43843
• http://secunia.com/advisories/31092Vendor Advisory
• http://secunia.com/advisories/31141
• http://www.blackberry.com/btsc/articles/635/KB15770_f.SAL_Public.html
• http://www.blackberry.com/btsc/articles/660/KB15766_f.SAL_Public.html
• http://www.kb.cert.org/vuls/id/289235US Government Resource
• http://www.securitytracker.com/id?1020505
• http://www.vupen.com/english/advisories/2008/2108/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43840
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43843

Published

Jul 21, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3240SQL injection vulnerability in index.php in AlstraSoft Affil…
• CVE-2008-3241SQL injection vulnerability in players-detail.php in UltraSt…
• CVE-2008-3242Heap-based buffer overflow in the PPMedia Class ActiveX cont…
• CVE-2008-3243Multiple unspecified vulnerabilities in the scanning engine …
• CVE-2008-3244The scanning engine before 4.4.4 in F-Prot Antivirus before …
• CVE-2008-3245SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9,…
• CVE-2008-3247The LDT implementation in the Linux kernel 2.6.25.x before 2…
• CVE-2008-3248qiomkfile in the Quick I/O for Database feature in Symantec …
• CVE-2008-3249The client in Lenovo System Update before 3.14 does not prop…
• CVE-2008-3250SQL injection vulnerability in index.php in Arctic Issue Tra…
• CVE-2008-3251Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 …
• CVE-2008-3252Stack-based buffer overflow in the read_article function in …