RIM warns of BlackBerry PDF vulnerability

 

Summary

The BlackBerry maker has highlighted a flaw in its software that could be used to shut down a server or execute malicious code.

Events

IBM Technology Conference & Expo 2012
May 23, 2012

Convention Centre B2 Room at 22nd Floor, Centara Grand @ Central World, 999/99 Rama I Road, Pathumwan, Bangkok 10330

Echelon 2012
June 11 and 12, 2012

University Cultural Centre, National University of Singapore

Startup Asia Jakarta 2012
June 7 and 8, 2012

12th Floor, Annex Building, Wisma Nusantara Complex, Jl. M.H. Thamrin No. 59 Jakarta 10350, Indonesia

MMA Forum Singapore
April 23-25, 2012

Grand Hyatt Singapore

Research In Motion has warned of critical bugs in its BlackBerry Enterprise Server and BlackBerry Professional Software that could be used to shut down a server or execute malicious code.

The bugs are the latest to affect the PDF distiller component of the BlackBerry Attachment Service. The PDF distiller has been hit by three similar bugs in recent months, all of a serious nature, RIM said in an advisory published on Tuesday.

RIM did not give details of the flaws, but said they could be exploited via a specially crafted PDF file. When the attachment is viewed on a BlackBerry smartphone, it could shut down the server or allow malicious code to be executed on the computer hosting the service, RIM said.

The bug was ranked as "highly critical" in an advisory from independent security firm Secunia.

BlackBerry Enterprise Server versions 4.1.3 to 5.0 are affected, as is BlackBerry Professional Software version 4.1.4, RIM said.

An interim patch available from RIM's website fixes the flaw. The patch includes the fixes for the previous PDF distiller bugs, RIM said.

Talkback

Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment

ZDNet Asia Live

Better biz models needed for sustainability http://t.co/B5DebtKB http://t.co/erFSwAUB #arcavir

http://t.co/VNaUVSe1 Better biz models needed for sustainability: Companies now see sustaina... http://t.co/i0P8D1Fw http://t.co/wiqTBKkj

Pacnet CEO departs; acquisition rumors gain #steam http://t.co/QSCFfCcy

5 SaaS adoption speed bumps to avoid http://t.co/AJQYAkOh via @zdnetasia

RT @SecMash: #InfoSec Malaysia organizations don't realize severity of cyberattacks - ZDNet Asia http://t.co/vFzACdwm #CyberSecurity

Experience trumps content in apps monetization http://t.co/MVPlf9gR

Better biz models needed for sustainability. http://t.co/tXuq7174

Sudden departure of Pacnet CEO, no explanation - ZDNet Asia: Sudden departure of Pacnet CEO, no explanationZDNet... http://t.co/UVG3OKCG

@ChemarieMonica : Malaysia organizations don't realize severity of cyberattacks - ZDN... http://t.co/iO8wdbz8 http://t.co/1QrdIsaV #tech

Malaysia organizations don't realize severity of cyberattacks. http://t.co/QK7PKdaP

RT @daryllau: Malaysia offers some manufacturing benefits over China http://t.co/mH23Uumr

Malaysia organizations don't realize severity of cyberattacks - ZDNet Asia http://t.co/HniF8J72 #news

#InfoSec Malaysia organizations don't realize severity of cyberattacks - ZDNet Asia http://t.co/vFzACdwm #CyberSecurity

http://t.co/bTDnDh7J Malaysia organizations don't realize severity of cyberattacks - ZDNet Asi... http://t.co/CzsMF2zn #infosec #security

Malaysia organizations don't realize severity of cyberattacks - ZDNet Asia: Malaysia organizat... http://t.co/iUpDhbeU #cloud #fail #TCN

So much as we know , MTK6575 extremely integrated frequency1GHz ARM Cortex-A9 processor, the superiority of 3G / HSPA Modem, and help the...

1 day ago by y15822137359 on 5 SaaS adoption speed bumps to avoid

I reckon your view: "CRM is strategy, not software", if a company replicating the approach uses in ERP implementation into CRM, what they...

2 days ago by wykoong on Gartner: Mobile CRM gives better ROI than social

This video will teach you about the Excel fill handle but also provide you with a workook to download... http://www.youtube.com/watch?v=...

2 days ago by TradeBrother on A quick fill handle trick for Microsoft Excel

waiting...

4 days ago by eapete on What should count in a company's market value?

Boy, you've opened a can of worms now.

Wait for the rants & raves.

4 days ago by eapete on What should count in a company's market value?

I was puzzling before this whether to replicate the success formula we executed for a financial institute, and come out with a standard s...

5 days ago by wykoong on Drop the egos, copy ideas, then innovate