PDF Processing Vulnerabilities Patched In BlackBerry

January 14th, 2009

PDF Processing Vulnerabilities Patched In BlackBerry

According to warnings issued by Research in Motion (RIM), hackers can use booby-trapped PDF attachments sent to BlackBerry devices to launch malicious code execution attacks. The company shipped patches this week to address a pair of critical vulnerabilities affecting their product.

The vulnerabilities are due to the improper processing of PDF files within the Distiller component of the BlackBerry Attachment Service.

Multiple security vulnerabilities exist in the PDF distiller of some released versions of the BlackBerry Attachment Service. These vulnerabilities could enable a malicious individual to send an email message containing a specially crafted PDF file, which when opened for viewing on a BlackBerry smartphone, could cause memory corruption and possibly lead to arbitrary code execution on the computer that hosts the BlackBerry Attachment Service.

RIM recommends that users upgrade to the latest version of the BlackBerry Unite! software. RIM customers are strongly urged to apply the updates or implement the workarounds listed in KB17118 and KB17119 documents to help mitigate the risk.

Share this article with others:

More on CyberInsecure:

Critical PDF Processing Vulnerability In BlackBerry Enterprise Server

Researchers Warn BlackBerry Users Over Malformed PDF Vulnerability

Blackberry Spyware Source Code, TXSBBspy, Released By Veracode

ActiveX Control Flaw In BlackBerry Leads To Code Execution Attacks

Free Download Turns BlackBerry Into Remote Bugging Device

Posted in Hardware, Mobile, Software, Vulnerabilities |

Print This Post

This entry was posted on Wednesday, January 14th, 2009 at 5:08 pm and is filed under Hardware, Mobile, Software, Vulnerabilities. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

If you found this information useful, consider linking to it from your own website.
Just copy and paste the code below into your website (Ctrl+C to copy)
It will look like this: PDF Processing Vulnerabilities Patched In BlackBerry

Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.