BlackBerry maker fixes PDF flaw that could crash server

The maker of the BlackBerry mobile device has fixed a PDF distiller vulnerability in the BlackBerry Attachment Service, which runs on the BlackBerry Enterprise Server.

Attackers could exploit the flaw if they are able to trick a user into opening a malicious PDF file attachment as part of an email, BlackBerry has said in an advisory. That could result in a crash of the Enterprise Server, which supports the popular smartphones.

Canada-based Research in Motion (RIM) said on Friday that it fixed the bug in BlackBerry Enterprise Server versions 4.1.3 through 4.1.5.

"There were no customer reports of any actual problems relating to this vulnerability, and RIM has since provided software updates that resolve the issue," RIM said in a statement.

The latest Enterprise Server version, 4.1.6 for Microsoft Exchange and IBM Lotus Domino, was not affected by the vulnerability, RIM said.

There are an estimated 14 million BlackBerry users worldwide.

See original article on SC Magazine US

Copyright © SC Magazine, US edition

blackberryfixpatchpdfrepairsecuritysolve