Research In Motion (RIM) has released a security advisory to address numerous vulnerabilities in the BlackBerry Attachment Service, a component of the BlackBerry Enterprise Server, which could allow an attacker to execute arbitrary code.
The bugs relate to the way malicious or malformed PDF files are handled by the PDF distiller of some versions of the Attachment Service, RIM said in its advisory.
The vulnerabilities could cause memory corruption, lead to a denial-of-service (DoS) condition or arbitrary code execution, RIM said. An attacker could exploit the flaws by convincing a user to open a malicious PDF file on a BlackBerry smartphone that is associated with a user account on a vulnerable version of BlackBerry Enterprise Server, RIM said.
Affected versions are BlackBerry Enterprise Server versions 4.1.3 through 4.1.7 and version 5.0.0 running on Microsoft Windows version 2000, 2003 or 2008, as well as BlackBerry Professional Software 4.1.4.
US-CERT has encouraged users and administrators to review BlackBerry's advisory and apply the updates.
See original article on scmagazineus.com
RIM patches BlackBerry Enterprise Server
Vulnerabilities could cause memory corruption, lead to a denial-of-service (DoS) condition, or arbitrary code execution.
Got a news tip for our journalists? Share it with us anonymously here.
Sponsored Whitepapers
_page-0001.jpg&w=100&c=1&s=0)
Leverage Technologies: Industry-Tailored ERP Implementation for Growth and Compliance
.png&w=100&c=1&s=0)
Service Over Signatures: The Truth About No Lock-In IT

Wasabi Reveals Hidden Costs and Cloud Storage Shifts in ANZ for 2025

Datacom + Microsoft Azure: Turn Ideas Into Impact in Just 4 Weeks

Protect APIs. Protect Your Business.