Research in Motion (RIM) has offered a fix to address a vulnerability in the BlackBerry desktop manager.
Security advisory KB19701 claimed that a malicious user could perform an attack designed to deceive the legitimate user into clicking on a link to a malicious website that appears to be from a trusted source. If a user chose to access that site from the computer that is running the BlackBerry desktop manager, they may be able to perform remote code execution using the legitimate user's privileges on the computer.
The BlackBerry desktop manager does not need to be running for a malicious user to exploit this vulnerability. The vulnerability was given a CVSS severity rating of 9.3 and applies to BlackBerry desktop software version 5.0 and earlier on all platforms, so it warrants immediate attention.
The United States computer emergency readiness team (US-CERT) encouraged users to review the advisory and apply any necessary updates.
See original article on scmagazineus.com
RIM offers patch for Blackberry desktop manager
By
SC Australia Staff
on
Nov 9, 2009 11:11AM
Risk of remote code execution.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why Genworth Australia embraced low-code software development
Promoted Content
Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content
Security "mindset shift" needed to protect organisations
.png&h=183&w=300&c=1&s=0)
Promoted Content
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Sponsored Whitepapers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
.jpg&h=146&w=240&c=1&s=0)
