Security Architecture, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Vulnerability Management, Patch/Configuration Management, Incident Response, TDR, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

BlackBerry maker fixes PDF flaw that could crash server

Share

The maker of the BlackBerry mobile device has fixed a PDF distiller vulnerability in the BlackBerry Attachment Service, which runs on the BlackBerry Enterprise Server.

Attackers could exploit the flaw if they are able to trick a user into opening a malicious PDF file attachment as part of an email, BlackBerry has said in an advisory. That could result in a crash of the Enterprise Server, which supports the popular smartphones.

Canada-based Research in Motion (RIM) said on Friday that it fixed the bug in BlackBerry Enterprise Server versions 4.1.3 through 4.1.5.

"There were no customer reports of any actual problems relating to this vulnerability, and RIM has since provided software updates that resolve the issue," RIM said in a statement.

The latest Enterprise Server version, 4.1.6 for Microsoft Exchange and IBM Lotus Domino, was not affected by the vulnerability, RIM said.

There are an estimated 14 million BlackBerry users worldwide.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.